Privacy Policy & Data Protection

This Privacy Policy outlines how the Kyno ERP platform (“Kyno”, “we”), developed by Intelli Service, collects, processes, and protects corporate and personal data.

1. Multi-Tenant Architectural Isolation

Kyno is engineered with strict database multi-tenant isolation. Each business organization operates within a cryptographically isolated tenant context, ensuring company, financial, tax, and client records are completely inaccessible to other tenants.

2. Data Collected

• Company Credentials: Legal name, trade name, corporate tax IDs, business address, and administrative contacts.
• User Credentials: Full name, corporate email address, Argon2id salted password hashes, and RFC 6238 two-factor authentication records.
• Operational Data: Issued invoices, transactional ledgers, inventory records, and client records generated during normal ERP usage.

3. Cryptography & Security Controls

All sensitive credentials in storage (including BaaS API tokens and tenant secrets) are encrypted using AES-256-GCM. Data in transit is strictly served over TLS 1.3 with rigorous security headers.

4. Inquiries & Data Rights

For data deletion, compliance audits, or data rights inquiries under applicable privacy laws (LGPD / GDPR), contact our security officer at contato@kyno.com.br.