Privacy Policy

Updated July 1, 2026

Pantheon Data LLC. (“we,” “us,” or “our”) operates https://kgcco.com (the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the Service, you agree to the practices described here.

1. Information We Collect

Information you provide directly

  • Account information: name, email address, password, company name, phone number.
  • Billing information: billing name, address, and payment details. Payment card numbers are collected and stored by our payment processor, [e.g. Stripe] — we do not store full card numbers.
  • Content: any files, text, images, or other data you upload or create in the Service.
  • Communications: messages you send to support, survey responses, and feedback.

Information collected automatically

  • Usage data: pages viewed, features used, clicks, referring URLs, timestamps, and session duration.
  • Device and log data: IP address, browser type and version, operating system, device identifiers, and crash logs.
  • Cookies and similar technologies: see Section 6.

Information from third parties

  • Authentication providers (e.g., Google, Microsoft) if you sign in through them — typically your name, email, and profile picture.
  • Payment processors (transaction status, last four digits of a card, billing country).
  • Analytics and advertising partners, where applicable.

2. How We Use Information

We use the information we collect to:

  • Provide, operate, and maintain the Service;
  • Create and manage your account and authenticate you;
  • Process payments and send billing notices;
  • Respond to support requests and communicate about the Service;
  • Monitor usage, diagnose problems, and improve features and performance;
  • Detect, prevent, and address fraud, abuse, and security incidents;
  • Send product updates, newsletters, and marketing communications, where permitted (you may opt out at any time);
  • Comply with legal obligations and enforce our Terms of Service.

3. Legal Bases for Processing (EEA/UK Users)

If you are in the European Economic Area or the United Kingdom, we process personal data under the following legal bases:

  • Contract: to provide the Service you have signed up for;
  • Legitimate interests: to secure, improve, and market our Service, balanced against your rights;
  • Consent: for non-essential cookies and marketing emails, where required (you may withdraw consent at any time);
  • Legal obligation: to comply with applicable law, including tax and accounting rules.

4. How We Share Information

We do not sell your personal information. We share it only as follows:

  • Service providers (subprocessors): vendors that host our infrastructure, process payments, send email, and provide analytics or customer support, acting on our instructions under contract.
  • Legal requirements: when required by law, subpoena, or other legal process, or to protect the rights, safety, or property of us, our users, or the public.
  • Business transfers: in connection with a merger, acquisition, financing, or sale of assets. We will notify you before your information becomes subject to a different privacy policy.
  • With your direction: when you connect a third-party integration or ask us to share information.
  • Aggregated or de-identified data: which cannot reasonably be used to identify you.

5. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service. After account closure, we delete or de-identify your data within 30 days, except where we must retain it to comply with legal, tax, or accounting obligations, resolve disputes, or enforce our agreements. Backups may persist for up to 90 days before being overwritten.

6. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential: authentication, session management, and security. These cannot be disabled.
  • Functional: remembering preferences and settings.
  • Analytics: understanding how the Service is used so we can improve it.
  • Marketing/advertising: measuring campaign performance and delivering relevant ads.

You can control cookies through your browser settings. Blocking essential cookies may prevent the Service from functioning.

7. Your Rights and Choices

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate or incomplete information;
  • Delete your personal information;
  • Export your data in a portable format;
  • Object to or restrict certain processing;
  • Withdraw consent where processing is based on consent;
  • Opt out of marketing emails (use the unsubscribe link or contact us);
  • Not be discriminated against for exercising these rights.

To exercise any of these rights, contact us at [PRIVACY EMAIL]. We will respond within the timeframe required by applicable law (generally 30 days; 45 days under the CCPA/CPRA). We may need to verify your identity before acting on a request. You may also use an authorized agent where the law permits.

California residents: we do not sell or share personal information as those terms are defined under the CCPA/CPRA. The categories we collect, our purposes, and the categories of recipients are described in Sections 1, 2, and 4.

8. Security

We implement technical and organizational measures designed to protect your information, including encryption in transit (TLS), encryption at rest, access controls, and regular review of our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any regulators as required by law.

9. International Data Transfers

We are based in United States of America and may process and store information in United States of America. If you access the Service from outside these regions, your information may be transferred across borders. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

10. Children’s Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us at [PRIVACY EMAIL] and we will delete it.

11. Third-Party Links and Services

The Service may contain links to or integrations with third-party websites and services. We are not responsible for their privacy practices, and this Policy does not apply to them. Review their privacy policies before providing information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version with a new “Last Updated” date and, for material changes, provide notice by email at least 30 days before the changes take effect.