Privacy Policy

Last updated: 2026-04-19

Who we are

kentico-developer.com (“KDaaS”) is a service operated by Refined Element LLC. If you have a question about this policy or about data we hold on you, reach out to mike@refinedelement.com.

What we collect

We collect only what we need to deliver the service and stay honest with our books:

• Email address. Provided at Stripe checkout and used to tie purchases to an account, send magic-link logins, and contact you about your order.
• Purchase records. Stripe processes the card transaction; we store only the resulting package, amount, currency, and Stripe session / customer identifiers. We do not store card numbers.
• Session content. Messages you send to the Kentico development agent, the agent's responses, and any project specs you submit through the dashboard.
• Code artifacts. Code files produced by the agent during your session.
• Scanner report findings. If you use the scanner submission endpoint, we keep the report payload and any contact email you provided.
• Technical metadata. IP address, user agent, and request paths — used for rate limiting, abuse detection, and basic service analytics. Access logs are retained in Application Insights for 90 days.

How we use it

• Deliver the paid services you request.
• Issue invoices, receipts, and process refunds.
• Provide product support and respond to your emails.
• Detect and prevent abuse (brute-force login attempts, rate-limit violations).
• Improve the service based on aggregate usage patterns.

We do not sell or rent your data, and we do not use your session content to train advertising models.

Third parties

We rely on a short list of vendors to run the service. Each processes only the data required for its role:

• Stripe — payment processing. Stripe receives your billing email and card details at checkout. See Stripe's privacy policy.
• Anthropic (Claude API) — processes your session messages and generates agent responses. Session content is sent to Anthropic for inference under Anthropic's commercial terms.
• Google Analytics — aggregate traffic measurement. Analytics is off by default; it loads only after you click Accept on the cookie banner.
• Office 365 SMTP (Microsoft) — transactional email delivery (magic links, purchase receipts, refund confirmations, artifact ZIP archives).
• Microsoft Azure — application hosting (App Service, Application Insights).

Retention

• Code artifacts and session transcripts: retained for 15 days after the session ends. We email you a ZIP of your artifacts before deletion.
• Purchase and account records: retained for 7 years to meet US accounting and tax obligations.
• Access logs (Application Insights): 90 days.
• Project specs and scanner findings: retained while your account is active; deleted on account-deletion request.

Your rights

If you are in the European Union / UK (GDPR) or in California (CCPA / CPRA), you have the right to:

• Access the personal data we hold about you.
• Receive an export of your data in a portable format.
• Request correction or deletion of your data.
• Object to processing or withdraw consent (e.g., decline analytics at any time by clearing the consent choice in this browser).

Email mike@refinedelement.com with your request. We commit to responding within 30 days. We may need to confirm your identity before acting on access or deletion requests. California residents can also designate an authorized agent to make requests on their behalf.

Children

KDaaS is a business-to-business service intended for professional Kentico developers and agencies. The service is not directed at, and not to be used by, children under 16.

Security

We use HTTPS everywhere, hash API keys at rest, enforce rate limits, and run regular security reviews. No system is perfectly secure — if you suspect a vulnerability, please email mike@refinedelement.com.

Changes to this policy

If we make material changes, we will update the “Last updated” date above and, where appropriate, notify active customers by email. Continued use of the service after the effective date constitutes acceptance of the revised policy.

Contact

Refined Element LLC
Email: mike@refinedelement.com
Web: refinedelement.com