Legal
Privacy Policy
Krapheno — Governance-as-Code Platform · Seed-to-Tree · April 2026
What Krapheno Collects
Krapheno does not collect personal data of natural persons at the ledger level. The SmritiTree records organisational decisions — agent identifiers, campaign parameters, policy references, and verdicts. No end-consumer personal data is ever ingested.
What Is Processed
Organisational and campaign data submitted by agency operators via the Krapheno API.
API keys stored as SHA-256 hashes — the original key is never retained.
Governed decision records: immutable, append-only, hash-chained.
Your Rights
Agency operators may request access to, correction of, or deletion of their organisational data. Deletion is processed within 30 days. Because all data is scoped to organization_id, erasure is structurally clean — removing one organisation's records does not affect the hash chain of any other.
Contact: karthikkattemane7@gmail.com
Data Location
| Component | Provider | Location |
|---|---|---|
| Application runtime | Contabo VPS | EU-DE (Germany) |
| Database | Supabase | ap-south-1 (Mumbai, India) |
| Frontend | Vercel | Edge CDN (global) |
EU-region database deployment available on request for European agency clients.
Contact
Seed-to-Tree · Chikkamagaluru, Karnataka · karthikkattemane7@gmail.com
Full legal documentation: Data Processing · DPA / SCC enquiries