Legal

Privacy Policy

Effective Date: January 1, 2026

Document ID: VK-LEGAL-PRIVACY-2026-001

1. Data Collection

ValidKernel collects data necessary to provide deterministic trust infrastructure services. We collect contact information provided during registration, usage data from API interactions, and technical data required for audit logging.

2. Data Use

Collected data is used to provide and improve services, maintain audit trails for compliance purposes, and communicate service updates. We do not sell personal data to third parties.

3. Data Retention

Audit logs are retained for the period required by applicable regulations. Contact information is retained while accounts remain active. Data deletion requests are processed within 30 days.

4. Security

Data is encrypted in transit and at rest. Access is controlled through the same L0/L1/L2 governance model used in our products. Security incidents are reported within 72 hours.

5. Contact

Privacy inquiries: privacy@validkernel.com