Privacy Policy

kinetic8 is an agentic cyber asset intelligence platform operated by entrovy. For the purposes of applicable data protection law, kinetic8 acts as a data controller for personal data collected through this website and our sales and marketing activities, and as a data processor for customer data processed on behalf of our customers within the platform.

If you have any questions about this policy or how we handle your data, contact our privacy team at privacy@kinetic8.ai.

Information you provide

• Contact details you submit through our demo, contact, or partner forms — such as your name, work email, company, job title, and any message content.
• Account information when you or your organization registers for the platform.
• Correspondence and support requests you send to us.

Information we collect automatically

• Usage and device data such as IP address, browser type, pages viewed, and referring URLs.
• Cookies and similar technologies — see our Cookie Policy for details.

Customer data within the platform

When your organization uses kinetic8, the platform ingests asset, configuration, and security telemetry from your connected sources. We process this data strictly on our customer's behalf and under their instructions, as governed by the applicable customer agreement and data processing addendum.

• To respond to demo requests, sales enquiries, and support tickets.
• To provide, operate, secure, and improve the kinetic8 platform.
• To send service communications and, where permitted, relevant product updates (you can opt out at any time).
• To detect, prevent, and investigate security incidents, fraud, and abuse.
• To comply with legal obligations and enforce our agreements.

Where the GDPR or equivalent law applies, we rely on the following legal bases:

• Contract — to provide services you or your organization have requested.
• Legitimate interests — to operate, secure, and improve our business, balanced against your rights.
• Consent — for optional marketing communications and non-essential cookies.
• Legal obligation — where processing is required to comply with the law.

We do not sell personal data. We share data only with trusted service providers who process it on our behalf under contractual confidentiality and security obligations — for example, cloud hosting, email delivery, and analytics providers. We may also disclose data where required by law or to protect our rights, users, or the public.

A current list of subprocessors is available to customers on request via privacy@kinetic8.ai.

kinetic8 operates primarily in the eu-west-1 region. Where personal data is transferred across borders, we put in place appropriate safeguards — such as Standard Contractual Clauses or an equivalent mechanism recognized under the GDPR, the Saudi Personal Data Protection Law (PDPL), and applicable NCA requirements.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. Customer data within the platform is retained and deleted in accordance with the applicable customer agreement.

Depending on your location, you may have rights under the GDPR, the Saudi PDPL, NCA frameworks, and other applicable laws, including the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data in certain circumstances.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Request portability of data you provided to us.
• Lodge a complaint with your local supervisory or data protection authority.

To exercise any of these rights, contact privacy@kinetic8.ai. We will respond within the timeframes required by applicable law.

We use cookies and similar technologies to operate the site, remember your preferences, and understand usage. For full detail and how to manage your choices, see our Cookie Policy.

We maintain administrative, technical, and organizational safeguards designed to protect personal data, including encryption in transit and at rest, role-based access control, and continuous monitoring. Learn more on our Security page. No method of transmission or storage is completely secure, but we work continuously to protect your information.

kinetic8 is a business-to-business product and is not directed to children. We do not knowingly collect personal data from anyone under the age of 18.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. We encourage you to review this page periodically.

For privacy questions or to reach our data protection contact, email privacy@kinetic8.ai or use our contact form.