Legal
Privacy policy
Last updated: 27 October 2026
This policy explains how Kastovia Holdings LLC handles personal information received through this website, hosting infrastructure, enquiries, and business communications.
1. Company and contact
Kastovia Holdings LLC is a limited liability company registered in Georgia. Registered office: Lochini 3, Apt. 5, 0100 Tbilisi, Georgia. Contact: contact@kastovia.com.
2. Information you provide
Kastovia may receive the information you voluntarily send by email, WhatsApp, or other business communication, including your name, company, email address, phone number, project details, workflow description, and related correspondence.
3. Initial website forms
The enquiry forms on this website prepare an email in your own email application. The website does not store the form contents. Do not include passwords, access tokens, customer records, or protected datasets in an initial enquiry.
4. Technical and hosting data
The hosting and security layer may automatically process an IP address, date and time, requested path, response status, browser or user-agent information, and diagnostic data in server or access logs. The site fonts are served locally. Optional website analytics is described below and remains off until you accept it.
5. Purposes and legal bases
Information may be processed to respond to an enquiry or take requested steps before a contract, perform an agreed contract, comply with legal, tax, accounting, or administrative obligations, and pursue legitimate interests such as securing the site, preventing misuse, maintaining business records, and improving services. Consent is used where it is specifically requested and may be withdrawn for future processing.
6. Sharing and processors
Kastovia does not sell personal information. Necessary hosting, security, email, communication, payment, professional-adviser, and service providers may process information under their own terms or appropriate instructions. Information may also be disclosed where required by law or needed to establish, exercise, or defend legal rights.
7. International transfers
Kastovia is registered in Georgia and uses service providers that may process information in other countries. Where applicable law requires transfer safeguards, Kastovia will use an available lawful mechanism appropriate to the provider and transfer.
8. Retention
Enquiries that do not become engagements are generally retained only while a response or follow-up remains reasonably relevant and ordinarily no longer than 24 months. Engagement, invoice, tax, accounting, and dispute records may be retained for the period required by applicable law or needed to protect legal rights. Hosting and security logs are retained according to operational and provider settings.
9. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection, or portability, and may withdraw consent without affecting earlier lawful processing. You may also complain to an applicable data-protection authority. Kastovia may verify identity and may retain information where a legal exception applies.
10. Security and automated decisions
Kastovia uses reasonable organizational and technical measures appropriate to the information and engagement. No internet transmission or storage method can be guaranteed absolutely secure. The corporate website does not use solely automated decision-making that produces legal or similarly significant effects.
11. Website analytics and payment attribution
Analytics is optional and off until you choose Accept analytics. Rejecting has no effect on installing or purchasing. Your choice is saved locally for up to 180 days; use Analytics choices in the footer to withdraw consent. If accepted, Google Analytics receives the public canonical page address without query strings or fragments, product and event names, pseudonymous browser/session identifiers, and a small allowlist of campaign labels. Google also receives connection information such as IP address and browser information when its script connects. Advertising features and automatic form, search and outbound-link measurement are disabled. GA cookies expire after 60 days; consented campaign attribution is retained locally for up to 30 days. We do not send form entries, names, email addresses, PDF contents, filenames, ClickUp task data or blocklist domains to Google Analytics. Google is a service provider whose processing may occur outside your country; see Google Privacy.
12. Purchases, refunds and product boundaries
For PDF Duplicate Review, PDF Reference Linker and TaskBound, Dodo Payments processes purchases and supplies licence keys independently of analytics consent. After analytics consent, existing checkout links carry an opaque consent reference in Dodo payment metadata. A private server receipt connects that reference to pseudonymous Google browser/session identifiers and allowlisted campaign labels for up to 30 days; withdrawing consent revokes receipts for this browser. A signed live payment confirmation, never a checkout click or return page, creates an analytics purchase using the actual currency and amount excluding reported tax. Refund confirmations are reported separately as payment_refund with their actual gross amount because Dodo does not supply a refund tax breakdown. Analytics purchase revenue is before refunds; Dodo is the authoritative financial record. A minimal private transaction ledger stores payment/refund identifiers, product, amounts, currency and delivery state, without customer contact or card details. Campaign/browser data is used only with analytics consent. Expired receipts are cleaned up on the next consent request; ledger attribution is scrubbed after 60 days and transaction rows after 730 days on the next valid payment event, so inactive records may remain until that cleanup runs. The extensions themselves remain separate from website analytics and retain their product-specific privacy policies. Store links use static non-personal campaign labels and no visitor identifiers. Analytics choices stop future website events and remove local analytics state; contact us about previously collected data or checkout metadata already submitted to Dodo.
13. Changes and contact
This policy may be updated as the website, providers, and business evolve. The current date will appear above. Questions or rights requests may be sent to contact@kastovia.com.