Privacy policy
This draft describes how Cowkeeper intends to handle personal data. It will be replaced by a reviewed policy before any customer data is processed.
Who we are
Cowkeeper provides managed IT and cybersecurity services to businesses. We act as a processor of our customers' employee data and as a controller for website visitors and prospective customers.
What we collect
From website visitors: the details you submit in forms (company, name, work email, phone, headcount, message) and standard server logs. From customers' employees, on the customer's instructions: work identity fields (name, work email, title, department, manager), device identifiers and security signals, training completions, policy acknowledgments, support requests and conversations with Cowkeeper AI. We do not collect government identifiers, personal documents, passwords, one-time codes or payment card numbers through the product.
Why we use it
To deliver the service: provisioning and supporting accounts, verifying security controls, running onboarding, training and authorized awareness exercises, and answering IT questions. We do not sell personal data or use it to train AI models.
Who sees it
Only Cowkeepers assigned to your company, under logged, time-limited access; the vendor systems your company already uses (for example Google Workspace or Microsoft 365) under your authorization; and infrastructure providers under data-processing agreements.
How long we keep it
Audit and security evidence for the life of the contract plus a retention period required for audit purposes; AI conversations and phishing-report uploads for 90 days by default (customers can shorten this); website leads for up to 24 months. On contract end, customer data is exported to the customer and deleted.
Your rights
Employees of customers should direct access or deletion requests to their employer, who instructs us. Website visitors can email privacy@cowkeeper.com.
Contact
privacy@cowkeeper.com