kaspero Ltd. ("kaspero", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services.

1. Information We Collect

1.1 Information You Provide

When you register for an account, request a demo, or contact us, we may collect:

1.2 Information Collected Automatically

When you access our platform, we automatically collect:

1.3 Information from Third Parties

We may receive information from third-party integrations you connect (such as Slack, Jira, or email providers), publicly available data sources relevant to compliance monitoring, and business partners or resellers who refer you to our services.

2. How We Use Your Information

We use collected information to:

3. Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

All third-party service providers are contractually bound to protect your data and use it only for the purposes we specify.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Compliance monitoring data (screenshots, scan results, audit trails) is retained for 7 years in accordance with regulatory requirements in key jurisdictions (UKGC, MGA, GGL). You may request deletion of your account data at any time, subject to our legal retention obligations.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

To exercise these rights, contact us at privacy@kaspero.io.

6. Cookies and Tracking

We use strictly necessary cookies for platform functionality, analytics cookies to understand usage patterns (with your consent), and preference cookies to remember your settings. You can manage cookie preferences through your browser settings or our cookie banner.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, for all international transfers of personal data.

8. Children's Privacy

Our services are intended for business use only and are not directed at individuals under 18. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. Your continued use of our services after such changes constitutes acceptance.

10. Contact Us

For privacy-related inquiries, contact our Data Protection Officer at privacy@kaspero.io or write to: kaspero Ltd., Data Protection Officer, [Registered Address].

These Terms of Service ("Terms") govern your access to and use of the kaspero platform, website, and services provided by kaspero Ltd. ("kaspero", "we", "our", or "us"). By accessing or using our services, you agree to these Terms.

1. Definitions

2. Account Registration and Access

To use our Platform, you must register for an account using a valid business email, provide accurate and complete registration information, maintain the security of your account credentials, and promptly notify us of any unauthorized access. You are responsible for all activities that occur under your account. kaspero reserves the right to suspend or terminate accounts that violate these Terms.

3. Subscription and Payment

3.1 Plans and Pricing

Access to the Platform is provided on a subscription basis. Pricing is based on the plan selected and any additional modules or usage. All fees are quoted in USD unless otherwise agreed in writing.

3.2 Billing

Subscriptions are billed annually or monthly as specified in your order form. Payment is due within 30 days of invoice. Late payments may incur interest at 1.5% per month or the maximum rate permitted by law.

3.3 Refunds

Subscription fees are non-refundable except as required by applicable law or as expressly stated in your order form.

4. Use of the Platform

4.1 Permitted Use

You may use the Platform solely for your internal business compliance monitoring purposes in accordance with these Terms and applicable law.

4.2 Restrictions

You shall not:

5. Intellectual Property

kaspero retains all rights, title, and interest in the Platform, including all software, algorithms, AI models, documentation, and trademarks. The Customer retains all rights to Customer Data. kaspero is granted a limited license to use Customer Data solely to provide and improve the services.

6. Data Processing

kaspero processes data in accordance with our Privacy Policy and applicable data protection laws. Where kaspero processes personal data on behalf of the Customer, the parties shall enter into a Data Processing Agreement (DPA) as required by GDPR or equivalent legislation. Our DPA is available upon request.

7. Compliance Data and Evidence

Compliance Data generated by the Platform (including screenshots, scan results, and audit trails) is stored securely and retained for 7 years. This data is provided "as-is" for compliance monitoring purposes. While kaspero strives for accuracy, Compliance Data should not be treated as legal advice. Customers remain responsible for their own regulatory compliance decisions.

8. Service Levels

kaspero commits to 99.9% platform uptime (excluding scheduled maintenance). Specific SLAs, including response times and support tiers, are defined in your order form. Credits for downtime exceeding SLA commitments are applied to future invoices.

9. Limitation of Liability

To the maximum extent permitted by law, kaspero's total liability arising out of or related to these Terms shall not exceed the fees paid by the Customer in the 12 months preceding the claim. kaspero shall not be liable for indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunities.

10. Indemnification

Each party agrees to indemnify and hold the other party harmless from claims arising from (a) breach of these Terms, (b) violation of applicable law, or (c) infringement of third-party intellectual property rights.

11. Term and Termination

These Terms remain in effect for the duration of your subscription. Either party may terminate for cause upon 30 days written notice of a material breach that remains uncured. Upon termination, your access to the Platform will cease. You may request export of your Customer Data within 30 days of termination.

12. Governing Law

These Terms are governed by and construed in accordance with the laws of England and Wales. Any disputes shall be resolved through binding arbitration administered by the London Court of International Arbitration (LCIA).

13. Changes to Terms

We may modify these Terms with 30 days prior notice. Material changes will be communicated via email and in-platform notification. Continued use after the effective date constitutes acceptance of the modified Terms.

14. Contact

For questions about these Terms, contact legal@kaspero.io or write to: kaspero Ltd., Legal Department, [Registered Address].

At kaspero, security is foundational to everything we build. As a compliance platform trusted by Tier-1 iGaming operators, we hold ourselves to the highest standards of data protection, infrastructure security, and operational resilience.

Our Security Commitment

We understand that our customers entrust us with sensitive compliance data, including audit trails, regulatory evidence, and business-critical monitoring results. Protecting this data is not just a feature - it is core to our mission.

Infrastructure Security

Cloud Architecture

Availability

Application Security

Development Practices

Authentication and Access

Data Protection

Data Handling

Privacy

Operational Security

Team and Processes

Monitoring and Response

Compliance and Certifications

We are actively working toward industry-recognized security certifications, including SOC 2 Type II and ISO 27001. While these certifications are currently in progress, our security controls are designed and implemented to meet these standards. We are happy to share our current security posture documentation, including our security policies and most recent penetration test summary, under NDA with prospective and current customers.

Responsible Disclosure

We value the security research community. If you discover a potential vulnerability in our platform, please report it to security@kaspero.io. We commit to acknowledging reports within 24 hours, providing regular updates on remediation, and recognizing researchers who help us improve (with permission).

Questions

For security-related inquiries, to request our security documentation, or to report a concern, contact security@kaspero.io.