KATiVO sells specification discipline. We owe you the same discipline in how we handle your data: a clear account of what we collect, why we collect it, who processes it on our behalf, and the rights you hold over it.
This notice is written to be honest and minimal. It is accurate as of the effective date above and will be revised whenever a material change occurs — for example, the addition of a new sub-processor or a new product surface that handles personal data.
KATiVO is operated by Joakim Holmer, founder, pending the formation of a Singapore-registered private limited company expected within the coming months. References in this notice to "KATiVO," "we," "us," and "our" refer to that operator and the company once incorporated. References to "you" mean any visitor to our website or any person whose personal data we hold.
Contact for any privacy matter: privacy@kativo.ai.
When you sign up to be informed about KATiVO progress, we collect your email address. When you book an assessment briefing or contact us, we collect your name, your email address, your organisation, your role, and whatever you choose to write in free-text fields.
We use this information for one purpose only: to do what you asked us to do. To send you progress updates if you signed up for them. To prepare for and conduct an assessment briefing if you booked one. To respond to your message if you sent one. We do not use it for any other purpose without asking you first.
Our hosting provider keeps standard server logs (IP address, timestamp, requested URL, user agent) for short periods for security and operational purposes. These logs are not used for analytics or marketing.
We do not run a website analytics service at this time. If we add one in the future it will be a privacy-first, cookie-free option, and we will disclose it here before it goes live.
To operate the website and services we use a small number of carefully selected third parties who process personal data on our behalf. Each is bound by contract and by applicable data-protection law to handle your data only as we instruct. One of these — Anthropic — processes diagnostic-result data when KATiVO assessment products are in use; the binding three-sentence disclosure governing that relationship follows the table. The current list:
| Sub-processor | Purpose | Region of processing |
|---|---|---|
| Cloudflare, Inc. | Website hosting, content delivery, edge functions, DNS, security | Global edge network including EU; corporate seat United States |
| Zoho Corporation | Inbound email handling for kativo.ai mailboxes (privacy@, hello@, support@, and similar) | United States |
| Sendinblue SAS (Brevo) | Transactional and notification email — confirmation of opt-in, welcome emails, and similar | European Union (France, Germany) |
| Anthropic, PBC | AI-assisted narrative rendering of Executive Report sections, when KATiVO assessment products are in use — see binding disclosure below | United States |
We will update this list whenever a sub-processor is added or removed. When KATiVO product surfaces requiring additional processors come online — for example, a calendar booking integration or a payment processor — those will be disclosed here before they go live or in the same release.
Some of our sub-processors are located outside your country. In particular, transfers to Anthropic in the United States (for AI-assisted report generation as described above) and to Zoho (for inbound email handling) involve cross-border processing. Where personal data is transferred from the European Economic Area, the United Kingdom, or Switzerland to a country without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses or equivalent safeguards. Where personal data is transferred from Singapore, we ensure recipients are bound by comparable obligations as required by the Personal Data Protection Act.
Subject to applicable law, you have the right to:
To exercise any of these rights, write to privacy@kativo.ai. We will respond within the statutory timeframe of the law that applies to you, and in any case without undue delay.
We protect personal data with measures appropriate to the risk. These include encryption in transit, restricted access, supplier-selection due diligence, and the same specification-first discipline we apply to every other part of how KATiVO operates. No system is perfectly secure, but we treat the protection of your data as a first-class engineering concern, not an afterthought.
KATiVO is a business-to-business service intended for use by professionals in their working capacity. The website and services are not directed at children, and we do not knowingly collect personal data from anyone under 16.
We will update this notice when our practices change or when a new sub-processor or product surface requires disclosure. The version number and effective date at the top of this page will reflect any change. For material changes we will give reasonable notice, including by email to subscribers where we hold contact details.
For any question about this notice, the personal data we hold, or to exercise any of the rights described above:
Email: privacy@kativo.ai
We aim to acknowledge privacy enquiries within 5 working days and to substantively respond within the statutory period applicable to you.