Effective date: June 15, 2026
This Privacy Policy explains how GenLab Inc. ("Kyberis", "we", "us") collects, uses, and retains information when you use the Kyberis website, dashboard application, contact forms, API services, MCP services, and related documentation.
We collect and retain information you submit through our contact forms, including name, company, email address, role, and any message content.
When you create an account or use the dashboard application, we collect account and authentication information needed to provide the service, such as internal user and account identifiers, account role, plan code, account type, account status, sign-in metadata, and similar operational information.
We also collect and retain information transmitted to our API and MCP services by agents and other API clients. This may include request and response payloads, query/body parameters, headers, timestamps, user agent information, API key identifiers, and operational metadata needed to run and secure the service.
With your consent where required, we collect product analytics and website analytics to understand usage, improve onboarding, measure feature adoption, and monitor product performance. This may include page views, referring domain, browser and device information, UTM parameters, session information, and product milestone events such as account creation, sign-in, API key creation, MCP client binding, checkout activity, plan changes, and team invite activity.
We use collected information to operate and improve the service, deliver API and MCP functionality, support customers, monitor performance and reliability, understand product adoption, improve website and onboarding flows, investigate abuse or security incidents, enforce our terms, and meet legal obligations.
We retain contact-form submissions and API-transmitted information for as long as reasonably necessary for business, operational, security, support, and legal purposes.
Product and website analytics data is retained according to the retention settings configured for our analytics provider and our internal retention practices. We may retain de-identified or aggregated analytics that no longer reasonably identifies a person or account.
We use privacy-conscious product and website analytics, including PostHog, to understand how the website and dashboard application are used. These tools may use cookies, local storage, or similar browser storage after consent where required.
We do not use analytics to collect prompts, API keys, investigation content, customer threat intelligence content, names, or email addresses. Authenticated product analytics is keyed to internal identifiers such as principal ID and account ID rather than raw personal contact information.
We do not collect IP information for analytics, and analytics payloads are limited to safe product, plan, account, browser, device, referrer, and usage metadata.
You may decline or disable analytics where controls are presented. We may still collect server-side operational logs and telemetry needed to run, debug, secure, and enforce the service.
We may share information with service providers who support hosting, security, infrastructure, analytics, billing, and support operations, under contractual obligations. We may also disclose information if required by law, legal process, or to protect rights, security, and safety.
We use reasonable technical and organizational safeguards to protect collected information. No system can be guaranteed 100% secure.
You may request access, correction, or deletion of certain personal information, subject to applicable law and legitimate retention needs. You may also opt out of non-essential analytics where controls are provided in the website or application.
We may update this Privacy Policy from time to time. Material updates will be posted on this page with an updated effective date.
For privacy requests or questions, contact hello@kyberis.ai.
