Privacy Policy

1. Overview

This Privacy Policy explains how KlugerTek ("we", "us") collects, uses, and protects information in connection with the KlugerTek License Manager (the "Service"). It applies to KlugerTek staff who operate the Service and to the customer and licensing data the Service processes.

2. Information we collect

• Account data — name, email, role, and authentication credentials of staff users (passwords are stored only as salted hashes).
• Customer and licensing data — organizations, product instances, licenses, activations, subscriptions, and payment records you enter or generate.
• Operational data — audit events, IP address, user agent, and timestamps recorded for security and traceability.
• Validation data — license validation requests, machine fingerprints, and heartbeats sent by deployed product instances.

3. How we use information

We use the information to:

• operate, secure, and improve the Service;
• authenticate users and enforce role-, scope-, and permission-based access;
• issue, validate, and revoke licenses and process related subscriptions and payments;
• maintain an audit trail and detect or investigate misuse;
• comply with legal and regulatory obligations.

4. Legal bases

We process information as necessary to perform our agreements, to pursue our legitimate interests in operating a secure licensing platform, and to comply with applicable law.

5. Sharing

We do not sell personal information. We share information only with service providers that process it on our behalf (for example, payment gateways and hosting/email providers) under appropriate confidentiality obligations, and where required by law.

6. Retention

We retain information for as long as needed to provide the Service and to meet legal, accounting, and security requirements. Audit events are retained per each product's configured retention period; certain security-relevant events may be retained indefinitely.

7. Security

We apply technical and organizational measures including encryption in transit, hashed credentials, tenant isolation, layered authorization, and append-only audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and may object to or restrict certain processing. Staff may update their own profile details within the Service. To exercise other rights, contact us below.

9. International transfers

Where information is processed outside Tanzania, we take steps to ensure it remains protected consistent with this Policy and applicable law.

10. Changes

We may update this Policy from time to time. Material changes will be communicated through the Service or by email, and the "Last updated" date above will be revised.

11. Contact

Privacy questions and requests can be sent to privacy@klugertek.io.