Privacy policy
Last updated 15 November 2026
In short. We collect only what you type into the enquiry form: your name, phone or Telegram, company and a description of your task. We use it to reply to your enquiry. We do not sell it, we do not add you to mailing lists without your consent, and the site sets no advertising or analytics cookies.
1. Who is responsible for your data
The data controller is Stanislav Lappo (Lappo Stanislav Ihorovych), a sole proprietor (FOP) registered in Ukraine, taxpayer number (RNOKPP) 3497900172, 136 Kamianka Garden Society, Oliivka Territorial Community, Zhytomyr District, Zhytomyr Oblast, 12410, Ukraine, trading as KREVANO ("we", "us").
For anything about your personal data, email hello@krevano.space or message us on Instagram at @krevano.space.
We process personal data under Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and, for visitors in the United Kingdom, the UK GDPR and the Data Protection Act 2018.
2. What we collect
- From the enquiry form: name, phone number or Telegram username, company and industry (optional), task description (optional), and the site language you used.
- Technical data: your IP address is used to limit how many enquiries can be sent from one address and to keep spam out. We do not store the address itself, only an irreversible hash of it, which is deleted after one hour.
- Site settings: your chosen language is saved in your browser (localStorage) and is never sent to us.
We do not collect special category data (Article 9 GDPR); please do not include it in the form.
3. Why we use it and our legal basis
| Replying to your enquiry, the free audit and a proposal | Steps you asked for before entering into a contract, Article 6(1)(b) |
|---|---|
| Protecting the form from spam and abuse | Our legitimate interest in keeping the site secure, Article 6(1)(f) |
Name and contact details are required: without them we cannot reply. We do not make automated decisions or build profiles.
4. Who receives your data
We do not sell your data or share it with anyone for their own purposes. To run the site we use processors that act on our instructions:
| Vercel Inc., USA | hosting of the site and of the function that receives enquiries; technical request logs |
|---|---|
| Upstash, Inc., USA | a short-lived queue that holds enquiries until our CRM collects them |
| Telegram | an instant notification of each new enquiry to our team chat |
International transfers. Some processors are in the USA or elsewhere outside the EEA and the UK. These transfers rely on the EU–US Data Privacy Framework (and its UK Extension) for certified companies, or on the European Commission's Standard Contractual Clauses (Article 46 GDPR) and the UK Addendum. You can ask for a copy of these safeguards at hello@krevano.space. Our CRM itself runs on our own hardware and is not exposed to the internet.
5. How long we keep it
- The Upstash queue holds an enquiry for a few minutes until our CRM collects it; it is then removed from the queue.
- In our CRM and team chat, for as long as we are handling your enquiry or contract, and no longer than 3 years after our last contact unless the law requires us to keep it longer.
- The IP address hash, one hour.
6. Your rights
You have the right to:
- access your data and get a copy (Article 15);
- have inaccurate data corrected (Article 16);
- have your data erased (Article 17) or its use restricted (Article 18);
- receive your data in a machine-readable format (Article 20);
- object to processing based on our legitimate interests (Article 21).
Email hello@krevano.space and we will reply within one month. You can also complain to a data protection authority: in the EU, the authority in the country where you live or work (list of EU authorities); in the UK, the Information Commissioner's Office (ico.org.uk).
7. Security
Data travels only over encrypted connections (HTTPS). Only KREVANO staff who need enquiries for their work can see them. Service access keys are stored separately from the site's code.
8. Changes to this policy
If we change what we collect or how we use it, we will update this page and the date at the top.