Privacy Policy
How Nandi Security handles information in connection with the Kavalan Protego application
Effective Date: September 11, 2026
This Privacy Policy describes how Nandi Security, Inc. ("Nandi Security,""we," "us," or "our") handles information inconnection with Kavalan Protego, our Windows desktop security-and-privacy scanning utility (the "Software"). This Privacy Policy is specific to Kavalan Protego. Our corporate website and other Nandi Security products,including the Kavalan web application, are covered by our general Privacy Notice at www.nandisecurity.com/privacy, which continues to apply to . Where this Privacy Policy and the general Privacy Notice differ with respect to Kavalan Protego, this Privacy Policy controls.
Kavalan Protegois designed, first and foremost, to be privacy-preserving. The Software runs entirely on your own device and operates on a read-only basis:
• Kavalan Protego does not transmit your scan results,findings, device configuration, or any data about your computer to NandiSecurity or to any third party.
• The report Kavalan Protego generates is saved only toyour own device and is never automatically uploaded, synced, or shared.
• Kavalan Protego does not include analytics software development kits, advertising identifiers, or tracking pixels, and does not monitor your browsing or device activity for marketing purposes.
• Kavalan Protego does not require you to create anaccount, sign in, or provide your name or email address in order to use it.
Because Kavalan Protego operates locally, we do not automatically collect, receive, or haveaccess to:
• The results of your scan, including any security orprivacy findings;
• Details about the applications, services, browser extensions, or accounts installed or configured on your device;
• Your network configuration, Wi-Fi history, or IPaddress, as observed by the Software; or
• Any log files that Kavalan Protego writes to yourdevice (see Section 5).
All of the above remain on your device, under your control, unless you choose to share them with us as described in Section 3.
Certain interactions with Kavalan Protego and related Nandi Security services are optional and are initiated by you. If you choose to engage in any of the following, you may provide us with personal information:
• Support and Feedback. Kavalan Protego includes anoptional "Send Feedback" link that opens a pre-addressed email to ours upport team, and you may otherwise contact us directly by email. Any personal information included in such a message – including your name, email address,and any description of your device or its configuration that you choose to write – is provided voluntarily and is not required to use the Software.
• Purchases. If you purchase Kavalan Protego, your name,email address, and payment details may be collected by the platform through which you purchased it (such as the Microsoft Store) or by our paymentprocessor, as described in Section 6.
• Check ID. The first time it runs, Kavalan Protego generates a short, random "Check ID" (for example,"KP-7F3QXK") and stores it only on your device. It is not derived from your name, email address, or any other personal information, and Nandi Security cannot use it, on its own, to identify you. If you choose to include your Check ID in a support or feedback message, it allows our support team to associate that message with a specific installation of the Software without requiring you to disclose your identity.
YOUACKNOWLEDGE THAT PROVIDING PERSONAL INFORMATION THROUGH A SUPPORT REQUEST,FEEDBACK MESSAGE, PURCHASE, OR SIMILAR VOLUNTARY INTERACTION IS ENTIRELY YOUR OWN CHOICE, THAT SUCH INFORMATION IS TRANSMITTED OVER CHANNELS (SUCH AS STANDARD EMAIL) THAT NANDI SECURITY DOES NOT FULLY CONTROL AND CANNOT GUARANTEE ARE SECURE, AND THAT YOU ASSUME THE RISKS ASSOCIATED WITH VOLUNTARILY SUBMITTING PERSONAL OR SENSITIVE INFORMATION THROUGH THESE CHANNELS.
We recommend that you do not include passwords, financial account numbers, government identification numbers, or other highly sensitive information in any support orfeedback communication.
If you voluntarily provide us with personal information as described in Section 3, we may use it to:
• Respond to your support request or feedback;
• Process and fulfill a purchase, and provide related customer service;
• Diagnose and fix problems with the Software;
• Improve Kavalan Protego and our other products; and
• Comply with applicable law or protect the rights,property, or safety of Nandi Security, its users, or the public.
Kavalan Protego stores certain files locally, in your Windows user profile (typically under%LOCALAPPDATA%\Kavalan\), including a baseline file used to detect changes between scans, a locally generated Check ID, and per-run log files that record scan timing and the status of each check performed, including any errors encountered. These files are not transmitted to Nandi Security. You may view or delete these files at any time; deleting them does not affect your ability to run future scans, though a new Check ID will be generated if the existing one is removed.
If you purchaseKavalan Protego through the Microsoft Store or another third-party platform,your purchase and any payment information are handled by that platform in accordance with its own privacy policy, and Nandi Security receives only limited information necessary to recognize your purchase (such as confirmationof entitlement), not your full payment details. If you purchase directly from Nandi Security, payment processing is handled by a third-party payment processor (such as Stripe); we do not directly collect or store your fullpayment card number. You can learn more about Stripe’s privacy practices at https://stripe.com/privacy.
We do not sell personal information collected in connection with Kavalan Protego. We may share personal information you voluntarily provide to us as described in Section 3 with:
• Service Providers who perform functions on our behalf(such as email delivery, payment processing, or customer-support tooling),under obligations of confidentiality;
• Business Partners or Affiliates in connection with the distribution or resale of Kavalan Protego (for example, a distribution platformsuch as the Microsoft Store);
• Successors in connection with a merger, acquisition,financing, or sale of some or all of Nandi Security’s business or assets; and
• Others when required by law, legal process, or a good-faith belief that disclosure is necessary to protect the rights, property,or safety of Nandi Security, its users, or the public, or to investigate fraudor a violation of our Terms of Service.
We maintain reasonable administrative and technical safeguards designed to protect anypersonal information you voluntarily provide to us. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee the absolute security of any information you send to us, includingthrough email or a feedback message.
Kavalan Protego is not directed to children, and we do not knowingly collect personalinformation from children under the age of 13. If we learn that we havecollected personal information from a child under 13 in a manner inconsistentwith the Children’s Online Privacy Protection Act ("COPPA"), we willdelete that information as soon as reasonably possible.
Kavalan Protegoi s developed and supported from the United States. If you use the Software orcontact us from outside the United States, any personal information you chooseto provide to us will be transferred to, and processed in, the United States.Depending on where you live, you may have additional rights regarding yourpersonal information under applicable law; to exercise those rights, contact ususing the information in Section 13.
You are never required to provide personal information to use Kavalan Protego. Where you have voluntarily provided personal information (for example, in a support email), you may ask us to access, correct, or delete it by contacting us at support@nandisecurity.com; we will respond in accordance with applicable law. We retain voluntarily submitted personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.
We may update this Privacy Policy from time to time. If we make material changes, we willupdate the "Effective Date" above and, where appropriate, provide additional notice. Your continued use of Kavalan Protego after a revised Privacy Policy is posted constitutes your acknowledgment of the revised policy.
If you have questions about this Privacy Policy or Kavalan Protego’s privacy practices, please contact us at support@nandisecurity.com, or by mail at Nandi Security,Inc., P.O. Box 485, Westford, MA 01886.