Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you interact with MKH LLC or our products, we collect information you voluntarily provide, including:

• Account information: name, email address, company name, phone number, and billing address when you register for an account or subscribe to a product.
• Payment information: credit or debit card details, billing address, and transaction history. Card data is processed by PCI-DSS certified payment processors; we do not store raw card numbers.
• Contact form submissions: name, email address, company, and message content submitted via our website contact form.
• Support communications: messages, attachments, and information you share when requesting technical support or customer service.

1.2 Information Collected Automatically

When you access our website or services, we automatically collect:

• Log data: IP address, browser type and version, operating system, referring URL, pages visited, and timestamps.
• Device information: device type, screen resolution, and hardware identifiers (in aggregate).
• Usage data: features accessed, actions taken within the product, session duration, and click patterns.
• Performance data: error reports, diagnostic data, and performance metrics to improve service reliability.

1.3 Information from Third Parties

We may receive information about you from third-party services you connect to our platform, such as CRM systems, marketing platforms, or authentication providers (e.g., Google OAuth).

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: to provide, operate, and maintain our SaaS products and website.
• Account management: to create and manage your account, process payments, and send subscription-related communications.
• Customer support: to respond to inquiries, troubleshoot issues, and provide technical assistance.
• Product improvement: to analyze usage patterns and develop new features that improve our services.
• Security and fraud prevention: to detect, investigate, and prevent unauthorized access, abuse, and fraudulent transactions.
• Legal compliance: to fulfill our obligations under applicable law, respond to lawful requests, and enforce our terms.
• Communications: to send service announcements, security alerts, and administrative messages. Marketing communications are sent only with your consent and can be unsubscribed at any time.

3. Legal Basis for Processing

Where applicable under GDPR and similar privacy laws, we process your personal data under one or more of the following legal bases:

• Contract performance: processing necessary to deliver the services you have subscribed to.
• Legitimate interests: fraud prevention, security monitoring, service improvement, and analytics.
• Legal obligation: compliance with applicable laws and regulatory requirements.
• Consent: where you have explicitly consented, such as receiving marketing emails. You may withdraw consent at any time.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share data in the following circumstances:

• Service providers: trusted third-party vendors who assist us in operating our business (e.g., cloud hosting, payment processing, email delivery, analytics). These parties are contractually obligated to protect your data and use it only for the services they provide to us.
• Payment processors: Stripe and other certified payment gateways process payment transactions under their own privacy policies and PCI-DSS compliance programs.
• Legal requirements: we may disclose information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of MKH LLC, our users, or the public.
• Business transfers: in the event of a merger, acquisition, or sale of assets, personal data may be transferred. You will be notified via prominent notice on our website.

5. Data Storage and Security

We implement industry-standard security measures to protect your personal information:

• All data in transit is encrypted using TLS 1.3.
• Data at rest is encrypted using AES-256 encryption.
• Access to personal data is restricted to authorized personnel on a need-to-know basis, protected by multi-factor authentication.
• We conduct regular security audits, vulnerability scans, and penetration testing.
• Immutable audit logs record all access to sensitive data.

Despite our safeguards, no method of transmission over the Internet or electronic storage is 100% secure. If you believe your data has been compromised, please contact us immediately at contact@mkhllc.com.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our services:

6.1 Types of Cookies We Use

• Essential cookies: necessary for the website and services to function (e.g., session management, CSRF protection). These cannot be disabled.
• Analytics cookies: help us understand how visitors use our site (e.g., page views, traffic sources). Data is aggregated and anonymized.
• Preference cookies: remember your settings and preferences across sessions.

6.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our services. For more information on managing cookies, visit allaboutcookies.org.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure ("Right to be Forgotten"): request deletion of your personal data, subject to legal retention obligations.
• Portability: receive your data in a structured, machine-readable format.
• Restriction: request that we limit the processing of your data in certain circumstances.
• Objection: object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.
• California residents (CCPA): you have the right to know, delete, and opt out of the sale of personal information. MKH LLC does not sell personal information.

To exercise any of these rights, contact us at contact@mkhllc.com. We will respond within 30 days.

8. International Data Transfers

MKH LLC is incorporated in the United States (Delaware). If you access our services from outside the United States, your information may be transferred to and processed in the US or other countries. We implement appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in cross-border transfers.

9. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, including:

• Account data: retained for the duration of your account, plus up to 90 days after account closure for recovery purposes.
• Transaction records: retained for 7 years to comply with financial and tax regulations.
• Support communications: retained for up to 3 years to improve service quality.
• Log data: retained for up to 12 months for security and debugging purposes.

You may request earlier deletion of your data, subject to our legal obligations.

10. Children's Privacy

Our services are not directed to individuals under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If we become aware that a child has provided personal data, we will promptly delete it. If you believe we have inadvertently collected such information, contact us at contact@mkhllc.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered users via email (for significant changes).
• Post a notice on our website homepage.

Continued use of our services after changes take effect constitutes your acceptance of the revised policy.

12. Contact Us

If you are located in the European Economic Area and believe we have violated your rights under the GDPR, you have the right to lodge a complaint with your local data protection authority.