Last Updated: September 2026
At KRAG (“we”, “our”, or “us”), we engineer software, firmware, and custom electronics for innovators, startups, and enterprises worldwide. We understand that our clients entrust us with sensitive project briefs, trade secrets, source code, and hardware schematics. This Privacy & Confidentiality Policy outlines our strict principles for collecting, using, protecting, and safeguarding your information.
1. Client Confidentiality & Non-Disclosure (NDA)
We treat all technical requirements, architectural blueprints, schematics, source code repositories, and business inquiries submitted through our website or direct communication as strictly confidential:
- We routinely sign bilateral or unilateral Non-Disclosure Agreements (NDAs) before technical discovery sessions.
- Project specifications submitted via our Project Scope Wizard (
/get-started) are accessible solely to our authorized engineering leads for scoping purposes. - We never sell, monetize, license, or share your proprietary data with third parties or external marketing networks.
2. Information We Collect
We only collect information necessary to evaluate project feasibility, deliver engineering contracts, or respond to client communications:
- Contact & Company Details: Your name, business email address, organization name, phone number, and jurisdiction provided via contact forms or the project intake wizard.
- Technical Specifications: Selected technology stacks, microcontrollers, communication protocols, target timelines, budgets, and project descriptions submitted for estimation.
- Client Support & Project Data: Repository links, crash dump reports, and test parameters shared during active consulting or support engagements.
- Technical Server Logs: Like all web servers, standard non-identifiable technical logs (IP address, browser type, referral URL, and timestamps) are temporarily retained for security auditing, DDoS mitigation, and system health monitoring.
3. How We Use Your Information
We use the collected information exclusively to:
- Analyze technical feasibility and generate accurate engineering proposals and estimates.
- Communicate directly regarding discovery calls, project milestones, and contract deliverables.
- Deliver customer support, warranty verifications, and firmware/hardware maintenance.
- Prevent fraudulent inquiries, automated spam, and malicious attacks on our infrastructure.
4. No Advertising Trackers or Third-Party Ad Networks
- Zero Ad Trackers: We do not host third-party advertisements, affiliate networks, or tracking pixels on our platform.
- No Data Brokering: We never sell, rent, or trade user lists or client information under any circumstances.
5. Security & Data Retention
All data transmitted between your browser and our platform is encrypted in transit using modern TLS (Transport Layer Security). Internal repositories, project boards, and client documentation are protected with multi-factor authentication (MFA) and strict role-based access control (RBAC).
We retain client communications and project scoping records only for as long as necessary to fulfill business engagements or comply with statutory accounting and legal requirements. Upon client request, proprietary scoping materials and account records can be permanently expunged.
6. Your Rights & Inquiries
You have the right to request access to the personal data we hold about you, request corrections, or request deletion of non-contractual records.
For inquiries regarding our confidentiality practices or to execute a formal NDA prior to sharing technical data, please contact our team:
- Primary Email: info@krag.lk
- Privacy & NDA Legal: privacy@krag.lk
- Phone: [+94-777-190-590](tel:+94777190590) / [+94-714-709-567](tel:+94714709567)
- Address: 528 H, Valihida Rd, Kaduwela, Sri Lanka
