Privacy Policy

KrateoSky LLC ("KrateoSky," "we," "our," or "us") respects your privacy and is committed to protecting the personal data we hold about you. If you have questions, comments, or concerns about this Privacy Policy or our processing of personal data, please see the bottom of this Privacy Policy for information about how to contact us.

This Privacy Policy explains our practices with respect to personal data we collect and process about you. This includes information we collect through, or in association with, our website with a home page located at https://www.krateosky.com (the "Site"), our products and services that we may offer from time to time via our website, or otherwise through your interactions with us (the website, products, services, collectively, the "Services").

Please review the following to understand how we process and safeguard personal data about you. By using any of our Services, whether by visiting our website or otherwise, and/or by voluntarily providing personal data to us, you acknowledge that you have read and understand the practices contained in this Privacy Policy. This Privacy Policy may be revised from time to time, so please ensure that you check this Privacy Policy periodically to remain fully informed.

1. Information We Collect

We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household ("personal data"). In addition, we may collect data that is not identifiable to you or otherwise associated with you, such as aggregated data, and is not personal data. To the extent this data is stored or associated with personal data, it will be treated as personal data; otherwise, the data is not subject to this notice.

We may collect the following types of information:

• Identifiers, such as real name, email address, and other contact details if you voluntarily provide them through forms or communications.
• Device information, including your device identifiers, operating system and version, hardware identifiers, browser type and settings, and other device information.
• Technical information, including usage details about your interactions with the Services, such as clickstream information to, through, and from our Services (including date and time).
• Geolocation data, including country, region, and city.
• Professional or employment-related information.

2. How We Obtain Your Information

We collect your information from the following sources:

• Directly from you. When you provide it to us directly whether online, by email, phone, or in-person.
• Automatically or indirectly from you. For example, as a result of your use of and access to the Site.

3. How We Use Your Information

We use the collected information to:

• Operate and improve the Site.
• Respond to your inquiries and communicate with you.
• Analyze usage trends and user behavior.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity.
• Identify and repair errors that impair existing intended functionality.
• Comply with applicable laws, regulations, rules and requests of relevant law enforcement and/or other governmental agencies, or for other purposes, as permitted or required by law.

4. Who We Share Your Information With

We do not sell your personal data. We may share your information with:

• Our Service Providers who help us operate the Site and provide services (e.g., analytics, hosting)
• Government agencies or regulators when permitted or required to do so by law; in response to a request from a law enforcement agency or authority or any regulatory authority; and/or to protect the integrity of the Services or our interests, rights, property, or safety, and/or that of our users and others.

5. Your Rights Regarding Personal Data

You have certain rights regarding the collection and processing of personal data. You may exercise these rights, to the extent they apply to you, by contacting us at the information provided at the end of this Privacy Policy.

Your rights vary depending on the laws that apply to you, but may include (in particular, if you are a resident of the European Economic Area):

• Right to be informed: The right to know whether, and for what purposes, we process your personal data;
• Right of access: The right to be informed about and obtain a copy of the personal data we collect and/or process about you;
• Right of rectification: The right to access, modify, and correct incomplete or inaccurate personal data about you (see the "Accessing, Modifying, Rectifying, and Correcting Collected Personal Data" section below for more information);
• Right to erasure ("Right to be Forgotten"): The right to request the permanent deletion of your personal data when it is no longer needed or if processing was based on consent which you have withdrawn;
• Right to restrict processing: The right to request that we temporarily or permanently limit the processing of some or all of your personal data;
• Right to object: The right to object to our processing of your personal data based on legitimate interests or for direct marketing;
• Right to data portability: The right to request a copy of your personal data in a structured, commonly used, and machine-readable format;
• Right to withdraw consent: The right to withdraw your consent at any time, where processing of personal data is based on your consent; and
• Right to lodge a complaint: The right to lodge a complaint with a data protection supervisory authority located in the jurisdiction of your habitual residence, place of work, or where an alleged violation of law occurred.

To exercise these rights, please contact us at contact@krateosky.com.

Accessing, Modifying, Rectifying and Correcting Collected Personal Data

We strive to maintain the accuracy of any personal data collected from you, and will try to respond promptly to update our records when you tell us the information in our records is not correct. However, we must rely upon you to ensure that the information you provide to us is complete, accurate, and up-to-date, and to inform us of any changes. Please review all of your information carefully before submitting it to us, and notify us as soon as possible of any updates or corrections using the contact information at the end of this Privacy Policy.

Depending on the laws that apply to you, you may obtain from us certain personal data in our records. If you wish to access, review, or make any changes to personal data you have provided to us through the Services, please contact us at the information provided at the end of this Privacy Policy. We reserve the right to deny access as permitted or required by applicable law.

Your California Privacy Rights

California's "Shine the Light" law permits our users who are California residents to request and obtain from us a list of what personal data (if any) we disclosed to third parties for their own direct marketing purposes in the previous calendar year and the names and addresses of those third parties. Requests may be made only once per year per person, must be sent to the email address below, and are free of charge. However, we do not disclose personal data protected under the "Shine the Light" law to third parties for their own direct marketing purposes.

6. Cookies and Similar Technologies

When you visit our Site, we and our service providers may store or access information on your device using cookies, local storage, and similar technologies ("cookies"). This section explains what we use, why we use it, and the choices you have.

What are cookies?

Cookies are small text files placed on your browser or device. Session cookies are deleted when you close your browser; persistent cookies remain for a defined period or until you delete them. We also use browser local storage to remember your cookie preference on this Site.

How we use cookies

We group cookies into the following categories:

• Strictly necessary. Required for the Site to function, for security, and for features you request (for example, signing in to the careers portal or protecting application forms from abuse). These do not require your consent under EU ePrivacy rules, but we still inform you about them here.
• Analytics (optional).Help us understand how visitors use our public pages so we can improve the Site. We only enable these if you choose "Accept all" or turn on analytics in "Customize" in our cookie banner.

Cookies and technologies we use

The exact names of cookies may change when we update our providers. The table below describes the main technologies in use as of the effective date of this Policy:

• Cookie preference (local storage: krateosky-cookie-consent). Remembers whether you allowed analytics cookies. Duration: up to 12 months. Category: strictly necessary (to store your choice).
• Careers session (cookies set by our authentication provider). For example, session tokens such as next-auth.session-token (or the secure variant on HTTPS). Used only when you sign in to the candidate portal so we can keep you logged in during your visit. Duration: session. Category: strictly necessary.
• Cloudflare Turnstile (third party). May set cookies when you use our job application form to distinguish legitimate users from bots. Provider: Cloudflare. Category: strictly necessary for security of the application process.
• Error monitoring (Sentry). We use Sentry to capture technical errors and improve reliability. Configuration is limited (for example, we do not enable session replay) and is treated as necessary for security and service integrity. Category: strictly necessary.
• Vercel Web Analytics (third party). First-party analytics to measure page views and performance on our public Site. Only loaded if you consent to analytics cookies. Provider: Vercel. Category: analytics (optional).

Your choices

On your first visit (and at any time via "Cookie preferences" in our site footer), you can accept all cookies, reject non-essential cookies, or customize whether analytics is allowed. If you reject analytics, we do not load Vercel Web Analytics for your browser.

You can also control cookies through your browser settings (block, delete, or alert). Blocking strictly necessary cookies may prevent parts of the Site — including the careers sign-in and application form — from working correctly.

Withdrawing analytics consent does not affect the lawfulness of processing based on consent before its withdrawal.

Legal bases (EEA visitors)

• Strictly necessary cookies: Art. 6(1)(f) GDPR (our legitimate interests in operating a secure, functional website) and, where applicable, Art. 6(1)(b) GDPR (steps at your request, such as submitting an application).
• Analytics cookies: Art. 6(1)(a) GDPR (your consent).

7. How We Protect Your Personal Data

We use commercially reasonable measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the Services. In particular, email may not be secure, and you should carefully decide what information you send to us via such communication channel. Any transmission of personal data is at your own risk.

8. How We Retain Your Personal Data

We keep the categories of personal data described in this Privacy Policy for as long as reasonably necessary to fulfill the purposes described or for as otherwise legally permitted or required, such as maintaining the Services, operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and nature of the information when deciding how long to retain personal data. At the end of the retention period, personal data will be deleted, destroyed, or deidentified.

Recruitment and Candidate Data Retention

If you interact with our recruitment services or apply for a position via our careers portal, we process and retain your personal data (including your name, contact details, employment history, qualifications, screening answers, and resumes) according to the following specific rules, which are designed to respect your privacy and comply with applicable laws including the General Data Protection Regulation (GDPR):

• With Extended-Retention Consent (Opt-In): If you explicitly choose to opt-in (e.g., by selecting the option to keep your data for future opportunities on your candidate dashboard), we will retain your candidate profile, application history, and uploaded resumes indefinitely to match you with upcoming roles at KrateoSky, or until you withdraw your consent. You may withdraw this consent easily at any time directly from your candidate dashboard or by contacting us.
• Without Extended-Retention Consent (Opt-Out): If you choose not to opt-in, or if you withdraw your previously given consent, we will automatically delete your candidate account, profile details, and all uploaded resumes exactly 12 months after your last active job application has been completed, closed, or withdrawn. During this 12-month period, we retain your data solely for compliance, auditing, and to manage or defend against any potential questions, claims, or legal disputes arising from your application process (processed under our legitimate interest in accordance with Art. 6(1)(f) GDPR).

For residents of the European Economic Area (EEA), we process your recruitment data on the following legal bases:

• Pre-contractual steps (Art. 6(1)(b) GDPR): To assess your suitability for the specific roles to which you actively apply.
• Consent (Art. 6(1)(a) GDPR): For keeping your data in our talent pool to consider you for future opportunities.
• Legitimate interests (Art. 6(1)(f) GDPR): To defend KrateoSky against any potential legal claims or disputes, or to ensure portal security.
• Legal obligation (Art. 6(1)(c) GDPR): Where we are required to retain certain records under national employment, tax, or corporate laws.

9. Your Choices

You have choices about certain information we collect about you, how we communicate with you, and how we process certain personal data. When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services. In addition, you can manage optional analytics cookies using the "Cookie preferences" control in our site footer or your browser settings to block the automatic collection of certain information.

Communications Opt-Out

You may opt out of receiving communications from us at any time through a given communications channel by following the opt-out link or other unsubscribe instructions provided in any email message received or by contacting us as provided at the end of this Privacy Policy.

Location Information

If you want to limit or prevent our ability to receive location information from you, you can deny or remove the permission for certain Services to access location information or deactivate location services on your device. Please refer to your device manufacturer or operating system instructions for instructions on how to do this.

10. Other Important Information About Personal Data and the Services

Collection of Personal Data from Children

Children under 18 years of age are not permitted to use the Services, and we do not knowingly collect information from children under the age of 18. By using the Services, you represent that you are 18 years of age or older.

Third-Party Websites and Services

As a convenience, we may reference or provide links to third-party websites and services, including those of unaffiliated third parties, our affiliates, service providers, and third parties with which we do business. When you access these third-party services, you leave our Services, and we are not responsible for, and do not control, the content, security, or privacy practices employed by any third-party websites and services. You access these third-party services at your own risk. This Privacy Policy does not apply to any third-party services; please refer to the privacy policy or policies for such third-party services for information about how they collect, use, and process personal data.

Business Transfer

We may, in the future, sell or otherwise transfer some or all of our business, operations or assets to a third party, whether by merger, acquisition or otherwise. Personal data we obtain from or about you via the Services may be disclosed to any potential or actual third-party acquirers and may be among those assets transferred.

11. Changes to This Privacy Policy

This Privacy Policy replaces all previous disclosures we may have provided to you about our information practices with respect to the Services. We reserve the right, at any time, to modify, alter, and/or update this Privacy Policy, and any such modifications, alterations, or updates will be effective upon our posting of the revised Privacy Policy. Your continued use of the Services following our posting of any revised Privacy Policy will constitute your acknowledgement of the amended Privacy Policy.

12. Applicability of This Privacy Policy

This Privacy Policy is subject to any agreements, including the Terms of Use, that govern your use of the Services. This Privacy Policy applies regardless of the means used to access or provide information through the Services.

This Privacy Policy does not apply to information from or about you collected by any third-party services, applications, or advertisements associated with, or websites linked from, the Services. The collection or receipt of your information by such third parties is subject to their own privacy policies, statements, and practices, and under no circumstances are we responsible or liable for any third party's compliance therewith.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at contact@krateosky.com.