Privacy Policy

Kama-IDCS is a platform that helps organizations build and manage ISO-aligned integrated management systems (IMS). Authorized users upload management-system source material and the platform assists with analysis, controlled-document drafting, review and packaging. This policy explains what information the platform handles and why.

• Account name and email address.
• Authentication provider identifiers (for example, the identifier returned when you sign in with Google).
• Organization and IMS project information submitted by authorized users.
• Uploaded standards, manuals and organizational files, and the documents generated from them.
• Usage, audit, security and AI cost records associated with your account and projects.
• Essential cookies and session data needed to keep you signed in and to operate the service securely.

• Authentication and account management.
• Building and operating your ISO/IMS workspaces.
• AI-assisted analysis and controlled-document generation that you request.
• Security, auditability, support and service improvement.

If you sign in with Google, the platform receives only the Google account information you authorize during sign-in, such as your name, email address and account identifier. Kama-IDCS never receives or stores your Google password or credentials.

• Content from your authorized projects may be sent server-side to configured AI providers in order to perform the generation or analysis you request.
• AI provider API credentials are held and used server-side only, and are never exposed in the browser.
• You should not upload unnecessary personal data, patient records, medical information or other highly sensitive information.

We share information only with the service providers needed to operate the platform: hosting, database and file storage, authentication, and the configured AI services. These providers process data on our behalf and only as needed to deliver the service. We do not sell your data.

Project content, generated documents and audit records are retained while your account and projects remain active, and for as long as needed to support auditability of the management system you build. You may request deletion of your account or specific project data by contacting us; some records may be retained where required for security, legal or accounting purposes.

We apply access controls so that users can only reach their own organization's data, encrypted transport for data in transit, credential handling that keeps provider keys on the server, and audit logging of significant actions. No system can be guaranteed to be completely secure, and you are responsible for protecting your own sign-in credentials.

Depending on your location, you may have rights to access, correct, export or delete your personal data, or to object to or restrict certain processing. To make a request, contact us at support@kama-idcs.com. We may need to verify your identity before acting on a request.

Our hosting, storage and AI providers may process data in countries other than your own. Where that happens, we rely on the safeguards offered by those providers for cross-border processing.

The platform is intended for organizational and professional use and is not directed to children. We do not knowingly collect personal information from children.

We may update this policy as the platform evolves. The date at the top of this page shows when it was last updated. Material changes will be reflected here.

Questions about this policy or your data: support@kama-idcs.com.