Privacy Policy

Introduction

Keyara Consulting ("Keyara," "I," "me," or "my") is a one-person practice run by Roberto Hernandez. I respect your privacy and am committed to protecting your personal information. This Privacy Policy explains how I collect, use, disclose, and safeguard your information when you visit keyara.ai or engage my services.

Please read this Privacy Policy carefully. By accessing or using this website and my services, you acknowledge that you have read, understood, and agree to be bound by all the terms outlined in this Privacy Policy.

Information I Collect

Personal Information

I may collect personal information that you voluntarily provide to me when you:

• Fill out forms on this website
• Request information about my services
• Contact me via email or other communication channels
• Engage my services as a client

This information may include:

• Name
• Email address
• Phone number
• Company name and position
• Your organization's industry and size
• What you are getting in touch about, and the challenges you describe
• Project details such as budget and preferred timeline
• Message content when you contact me

Automatically Collected Information

When you visit this website, my hosting provider's server records basic technical details of each request, as nearly every web server does. This may include:

• IP address
• Browser type and version
• Operating system
• Referring website
• Pages requested
• Time and date of your visit

How I Use Your Information

I may use the information I collect for various purposes, including to:

• Provide, maintain, and improve this website and my services
• Respond to your inquiries and fulfill your requests
• Send you administrative information about an inquiry or engagement
• Protect against, identify, and prevent fraud and other illegal activities
• Comply with my legal obligations

Information Sharing and Disclosure

I may share your information in the following situations:

Service Providers

I may share your information with third-party vendors, service providers, and contractors who perform services on my behalf and require access to such information to provide these services. These include website hosting, website analytics (Cloudflare Web Analytics), the contact form and its database (Airtable), and email (Google), and may include payment processing if you pay for services online.

Business Transfers

If Keyara is involved in a merger, acquisition, financing, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. I will notify you via email and/or a prominent notice on this website of any change in ownership or uses of your personal information.

Legal Requirements

I may disclose your information where I am legally required to do so to comply with applicable law, governmental requests, judicial proceedings, court orders, or legal processes.

With Your Consent

I may disclose your personal information for any other purpose with your consent.

Data Security

I implement appropriate technical and organizational measures to protect the security of your personal information. However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While I strive to use commercially acceptable means to protect your personal information, I cannot guarantee its absolute security.

Data Retention

I will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. I will retain and use your information to the extent necessary to comply with my legal obligations, resolve disputes, and enforce my policies.

In general, I follow these data retention practices:

• Contact information from inquiries: 2 years from last interaction
• Client service data: 7 years after the end of the client relationship (for legal and tax purposes)
• Server logs: kept according to my hosting provider's standard log rotation
• Website analytics: held by Cloudflare as page-view and visit statistics, under Cloudflare's own retention practices

If you request deletion of your personal information, I will delete or anonymize your personal information so that it no longer identifies you, subject to certain exceptions where I am legally required or permitted to maintain certain personal information.

GDPR Compliance (For EU Residents)

If you are a resident of the European Union (EU) or European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). I aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal information.

Under the GDPR, you have the following specific rights:

• Right of access: You have the right to request copies of your personal data.
• Right to rectification: You have the right to request that I correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to erasure: You have the right to request that I erase your personal data, under certain conditions.
• Right to restrict processing: You have the right to request that I restrict the processing of your personal data, under certain conditions.
• Right to object to processing: You have the right to object to my processing of your personal data, under certain conditions.
• Right to data portability: You have the right to request that I transfer the data I have collected to another organization, or directly to you, under certain conditions.

If you wish to be informed about what personal data I hold about you and if you want it to be removed from my systems, please contact me using the information in the "Contact Me" section.

Legal Basis for Processing

I will only process your personal data when I have a legal basis to do so. The legal bases depend on the services you use and how you use them. This means I collect and use your information only where:

• I need it to provide services to you, including to operate the website, provide customer support, and protect the safety and security of my services
• It satisfies a legitimate interest (which is not overridden by your data protection interests), such as keeping this website secure and working, and protecting my legal rights and interests
• You give me consent to do so for a specific purpose
• I need to process your data to comply with a legal obligation

Data Protection Contact

I handle data protection questions myself; there is no separate Data Protection Officer. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact me using the details set out in the "Contact Me" section.

Data Processing Agreements

If you are a business client in the EU and I process personal data on your behalf, I am considered a data processor under the GDPR. In that case, you and I will sign a Data Processing Agreement (DPA) for that engagement before any processing begins.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Your Rights Under CCPA/CPRA

California residents have the right to:

• Right to Know: Request disclosure of the categories and specific pieces of personal information I have collected about you, the categories of sources from which the personal information is collected, my business purpose for collecting personal information, and the categories of third parties with whom I share personal information.
• Right to Delete: Request deletion of personal information I have collected from you, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information that I maintain about you.
• Right to Opt-Out: Opt-out of the sale or sharing of your personal information to third parties.
• Right to Limit Use: Limit the use and disclosure of sensitive personal information.
• Right to Non-Discrimination: Not be discriminated against for exercising your CCPA rights.

Categories of Personal Information I Collect

In the past 12 months, I have collected the following categories of personal information:

• Identifiers (such as name, email address, phone number)
• Commercial information (such as services purchased or considered, and the project details you share, such as budget and preferred timeline)
• Internet or other electronic network activity information (such as the pages of this website you request, the page that referred you, and your browser type, recorded in server logs and by Cloudflare Web Analytics)
• Professional or employment-related information (such as company name, position, and your organization's industry and size)

Sale or Sharing of Personal Information

I do not sell your personal information for monetary consideration. However, under the CCPA/CPRA, some sharing of personal information may be considered a "sale" or "sharing" even if no money is exchanged. I do not sell or share your personal information as defined under the CCPA/CPRA.

How to Exercise Your Rights

To exercise your rights under the CCPA/CPRA, please contact me using the information provided in the "Contact Me" section. I will respond to verifiable consumer requests within 45 days of receipt. I may extend this period by an additional 45 days when reasonably necessary, in which case I will inform you of the extension.

AI and Machine Learning Usage

I use artificial intelligence and machine learning tools in some aspects of my work. This section explains how I use these technologies and how they may interact with your personal information.

How I Use AI Technologies

I may use AI and machine learning technologies for the following purposes:

• To optimize my marketing and communication strategies
• To improve my service offerings
• To use AI tools in client work, where an engagement calls for it

Client Data Processing

When an engagement involves AI tools, I may process client data with them. In such cases:

• I process client data only as instructed by the client and in accordance with my service agreements
• I implement appropriate technical and organizational measures to protect client data
• I do not use client data to train AI models unless explicitly authorized by the client
• I do not share client data with third parties except as necessary to provide my services or as required by law

Third-Party AI Services

I may use third-party AI services and tools in my work. When I use such services:

• I carefully select providers that maintain appropriate security and privacy standards
• I review the privacy policies and data processing practices of these providers
• I enter into appropriate data processing agreements with these providers when required

For more information about how I use AI technologies in my services or how I process data using AI tools, please contact me using the information provided in the "Contact Me" section.

User-Generated Content

This website and my social media channels may allow you to submit content, such as comments, testimonials, reviews, or feedback. Any content you voluntarily disclose for posting becomes available to the public and is subject to the following provisions:

Content License

By posting content on this website or my social media channels, you grant Keyara a non-exclusive, royalty-free, perpetual, irrevocable, and fully sublicensable right to use, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, and display such content throughout the world in any media.

Responsibility for Content

You are solely responsible for any content you post and its accuracy. I take no responsibility and assume no liability for any content posted by you or any third party.

Content Removal

I reserve the right to remove any content that I determine, in my sole discretion, violates this Privacy Policy or may be offensive, illegal, or violate the rights of any third party.

Testimonials

I may display personal testimonials of satisfied clients on this website. With your consent, I may post your testimonial along with your name. If you wish to update or delete your testimonial, please contact me using the information provided in the "Contact Me" section.

Social Media Integration

Data Sharing with Social Media Platforms

This website links to my LinkedIn profile, but it does not embed social media buttons, feeds, or tracking code. No social media platform is told about your visit to this website unless you follow a link to it, and once you are on that platform, its own privacy policy applies.

Social Media Accounts

I maintain profiles on various social media platforms. When you follow, like, comment, or interact with my social media accounts:

• I may receive aggregate data about these interactions from the social media platform
• I may collect and process any personal information you voluntarily provide in your public interactions with my social media accounts
• Your interactions with my social media accounts are also governed by the privacy policies of the respective social media platforms

I encourage you to review the privacy policies of any social media platforms you use to understand how they collect and process your information.

Professional Services Disclaimer

This Privacy Policy governs the collection and use of information through this website and my general communications. When you engage Keyara for consulting services, the handling of your information will also be subject to:

Service Agreements

The terms of any professional services agreement, statement of work, or other contract between you and Keyara will govern the use and handling of information provided in connection with those services. In the event of any conflict between this Privacy Policy and the terms of such agreements, the terms of the service agreement will control with respect to the subject matter of that agreement.

Client Confidentiality

I maintain strict confidentiality of client information provided to me in the course of my professional services. I do not use client confidential information for any purpose other than providing the agreed-upon services, unless otherwise authorized by the client or required by law.

Project-Specific Privacy Measures

Depending on the nature of the engagement, I may implement additional privacy and security measures specific to your project. These measures will be documented in the service agreement or related project documentation.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, which may include:

• The right to access personal information I hold about you
• The right to request correction of inaccurate personal information
• The right to request deletion of your personal information
• The right to object to processing of your personal information
• The right to request restriction of processing of your personal information
• The right to data portability
• The right to withdraw consent

To exercise any of these rights, please contact me using the information provided in the "Contact Me" section below.

Cookies and Similar Technologies

This website's own code does not set cookies, and it does not use advertising trackers or tracking pixels. It uses one analytics service, which sets no cookies. Here is what runs, and what each thing does:

• Website analytics: I use Cloudflare Web Analytics to count page views and visits, and to see which pages are read and which websites send visitors here. It does not use cookies or any other storage in your browser, and Cloudflare states that it does not fingerprint visitors by IP address, browser details, or any other data for its analytics. When a page loads, a small script from Cloudflare sends Cloudflare the page address, the page that referred you, your browser type, and how long the page took to load; as with any web request, Cloudflare also receives your IP address. I see only totals, never individual visitors.
• Browser cache: to make repeat visits load faster, this website saves copies of its own files and fonts in your browser. You can clear them at any time in your browser settings.
• Third-party services: fonts are delivered by Google Fonts, and a script library is delivered by cdnjs (Cloudflare), so those providers receive your IP address when they send those files. The contact form is an embedded Airtable form, and it is governed by Airtable's own privacy and cookie policies.

Third-Party Websites

This website may contain links to third-party websites and applications. I am not responsible for the privacy practices or the content of these third-party sites. I encourage you to read the privacy policy of every website you visit.

Children's Privacy

This website and my services are not directed to individuals under the age of 18. I do not knowingly collect personal information from children under 18. If you become aware that a child has provided me with personal information, please contact me. If I become aware that I have collected personal information from a child under 18 without verification of parental consent, I will take steps to remove that information from my servers.

Changes to This Privacy Policy

I may update this Privacy Policy from time to time. I will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes.

For significant changes to this Privacy Policy, I will make reasonable efforts to provide notice, such as through a prominent notice on this website or by sending you an email notification.

Contact Me

If you have any questions or concerns about this Privacy Policy or my privacy practices, please contact me at:

For EU data protection matters, contact me at the email address above.