Privacy Policy
Last updated: March 2026. Kyros is operated by Possivel Technologies. Registered in Zimbabwe.
1. What We Collect
When you create a Kyros account, we collect: your name, email address, and company name. When you use the platform, we collect operational data you enter: vehicle registrations, driver information, shipment records, trip data, document uploads, financial transactions, and payroll records. We collect usage data: which features you use, when you log in, and how the platform performs for your account. We collect this data to operate the platform and provide the service.
2. Document Uploads
When you upload documents to Kyros — waybills, weighbridge tickets, driver licenses, compliance certificates — those files are stored in Cloudflare R2 object storage. The system processes these documents to extract structured data using OCR and field extraction services (Reducto and Extend.ai). Extracted data is stored in your account database. Original document files are retained for your access and for audit purposes.
3. How We Use Your Data
We use your data to operate your account, generate reports, process documents, send notifications you have configured, and improve the platform. We do not sell your data to third parties. We do not use your operational data (fleet, shipment, HR, financial records) for marketing or advertising purposes. We may use anonymized, aggregated usage statistics to improve platform performance.
4. Third-Party Services
Kyros uses the following third-party services:
- Clerk (auth.clerk.com) — authentication, user management, and multi-factor authentication
- Neon (neon.tech) — PostgreSQL database hosting
- Cloudflare R2 — file storage for document uploads
- Reducto and Extend.ai — document field extraction (your documents are processed by these services to extract data)
- Mailgun — transactional email (notifications, invites, payment reminders)
- Inngest — background job processing
Each service has its own privacy policy. Your data is processed by these services only as necessary to operate Kyros.
5. Data Security
Account access is protected by Clerk authentication, which supports multi-factor authentication and SSO. All data in transit is encrypted via TLS. Database data is encrypted at rest. Access to your organisation's data is controlled by the role-based permissions you configure in Kyros. Our team can access account data for support purposes with your knowledge. Every data access action is audit-logged.
6. Data Retention
We retain your data for as long as your account is active. If you close your account, we will delete your data within 30 days, except where retention is required for legal compliance. Document uploads and audit logs may be retained for up to 7 years to comply with applicable financial and transport regulations.
7. Your Rights
You can export your data from Kyros at any time via the account settings. You can request deletion of your account and data by contacting support@possivel.ai. For questions about this privacy policy, contact: privacy@possivel.ai
8. Jurisdiction
Kyros is operated by Possivel Technologies, registered in Zimbabwe. This privacy policy is governed by the laws of Zimbabwe. For users in other SADC countries, we comply with applicable data protection regulations in those jurisdictions.