Legal
Privacy Policy
Effective July 16, 2026 · Last updated October 9, 2026
This Privacy Policy explains how Komorebi Infrastructure LLC, a limited liability company organized under the laws of the State of Florida, United States ( “Komorebi Hub,” “we,” “us,” or “our”), which operates the website at komorebihub.com (the “Site”), collects, uses, discloses, and safeguards information about you. It also describes the choices and rights you have regarding that information.
We’ve tried to keep this plain and accurate to what the Site actually does. If anything is unclear, contact us at info@komorebihub.com.
1. Who we are & scope
Komorebi Infrastructure LLC operates the Komorebi Hub website and provides business-to-business digital architecture, automation, and marketing-technology consulting services. This Policy applies to personal information we process through the Site, primarily the inquiry form, the AI assistant and the automatic website audit, and to related communications. It does not govern the internal systems of clients we build or operate for under a separate written services agreement; those are addressed in that agreement or a data processing addendum.
2. Information we collect
Information you give us
When you submit the inquiry form on the Site, we collect:
- Work email address, so we can reply to you.
- Company name: to understand who is reaching out.
- The message you write: the description of what you’re trying to solve. Please don’t include sensitive personal information or confidential third-party data in this field.
- Your website address, only if you choose to give it: we use it to run the automatic website audit described below and email you the report.
If you email us directly, we also receive whatever information is in that correspondence.
The AI assistant (chat)
The Site offers an AI assistant you can open and talk to. It is optional: if you never open it, none of the following applies.
- What you type. The messages you send are transmitted to Anthropic’s Claude API, which generates the assistant’s replies, or to Google’s Gemini API when Claude is unavailable. Please don’t type sensitive personal information or confidential third-party data into the chat.
- Details you choose to leave. If you ask the assistant to have us get in touch, it records the contact details you give it (such as your email and company) in the same way the inquiry form does, and we are notified by email. If you ask it to audit your website, it starts the automatic website audit described below.
- Abuse prevention. To stop bots, automated flooding and off-topic use, we count requests against a one-way hash of your IP address, over windows of a few minutes to a day. Repeated messages unrelated to our services pause the chat for a day. We do not store the address itself, the hash is used only to enforce those limits, and the record is deleted automatically within about eight days.
The automatic website audit
If you give us your website in the inquiry form, or ask the AI assistant to audit it, we run an automatic audit of that site and email you the report. It is optional: if you don’t give us a website, none of the following applies.
- What we look at. We fetch the website’s public pages and files (such as its home page, robots.txt and sitemap), read its public DNS records, including the ones that govern its email, and send its address to Google PageSpeed Insightsto measure its speed. We only read what any visitor or search engine can see.
- Who writes the report. Those measurements, the website address, the company name you gave and the goal you picked are sent to Anthropic’s Claude API, which drafts the report. Your email address and the rest of your message are not sent to it.
- Delivery. Resend emails the report to the address you gave, and sends us a copy with your details so we can follow up.
- Limits. To prevent abuse, we cap how many audits one visitor, one email address and one website can request. We count them against one-way hashes, never the IP address, email or domain itself, and delete those records as described above.
Information collected automatically
Like most websites, when you visit the Site our hosting and security provider automatically logs limited technical data for reliability and abuse-prevention purposes, which may include your IP address, browser type and settings, device information, referring pages, and the date and time of your request. We use strictly-necessary cookies for security and basic functionality, plus Cloudflare Web Analytics, which counts page views without cookies, without local storage and without any identifier that could follow you between sites. Only if you consent, we additionally load Google Analytics, which does set cookies; see our Cookie Policy for details.
What we do NOT do
We do not use advertising cookies, build advertising or behavioral profiles, track you across other websites for advertising, or sell or “share” your personal information for cross-context behavioral advertising. The only analytics we use is Google Analytics, and only if you opt in through our cookie banner: you can decline it and everything on the Site still works. See section 4 and our Cookie Policy for details.
3. How we use your information
- To respond to your inquiry and communicate with you about your request.
- To run the automatic website audit you ask for and email you the report.
- To evaluate, scope, and provide our services, and to enter into agreements with you.
- To operate, secure, maintain, and improve the Site and prevent fraud or abuse.
- To comply with applicable law and to establish, exercise, or defend legal claims.
Legal bases (EEA / UK visitors)
Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases: your consent (which you may withdraw at any time) and/or steps taken at your request to enter into a contract when you submit the inquiry form; and our legitimate interests in responding to enquiries, securing the Site, and running our business, balanced against your rights. Where we are legally required to process data, we rely on compliance with a legal obligation.
4. Cookies & similar technologies
By default the Site uses only essential cookies and stores a small theme preference and your cookie choice locally in your browser. If you select “Accept” on our cookie banner, we also load Google Analytics to measure how the Site is used; if you select “Reject” (or ignore the banner), Google Analytics never loads and no analytics cookies are set. We never use advertising cookies. Full details, including the third-party services involved, are in our Cookie Policy.
5. How we share information
We do not sell your personal information. We disclose it only in these limited situations:
- Service providers (sub-processors). We use trusted vendors to host the Site, store inquiries, run the AI assistant and the automatic website audit, and send email. They may process your information only on our instructions and to provide their services. See the table below.
- Legal and safety. When we believe disclosure is required by law, regulation, legal process, or governmental request, or is necessary to protect the rights, property, or safety of Komorebi Hub, our users, or others.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.
- With your direction or consent. When you ask us to share it, or otherwise consent.
Sub-processors
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Cloudflare, Inc. | Website hosting, content delivery, and security/bot protection | Technical/log data (e.g., IP address, request metadata) | United States / global edge network |
| Supabase, Inc. | Database and server functions that store form and chat submissions and run the AI assistant and the automatic audit | Email, company name, message, timestamps, and the one-way hashes used for abuse prevention | United States |
| Cloudflare, Inc. (Web Analytics) | Counts page views and referrers in aggregate: no cookies, no device storage | Page URL, referrer, and coarse technical data, not tied to an identifier | United States / global edge network |
| Anthropic, PBC (Claude API) | Generates the AI assistant’s replies and drafts the automatic audit report: only if you use the chat or ask for an audit | The messages you send to the assistant; for an audit, the website address, company name, chosen goal and the website’s public measurements | United States |
| Google LLC (Gemini API) | Backup for the AI assistant’s replies when Claude is unavailable: only if you use the chat | The text of the messages you send to the assistant | United States / global |
| Google LLC (PageSpeed Insights) | Measures your website’s speed for the automatic audit: only if you ask for one | The address of the website you give us | United States / global |
| Resend (Plus Five Five, Inc.) | Delivers the notification email raised by a form or chat submission, and the automatic audit report | The contents of your submission, including your email address, and the audit report | United States |
| Google LLC (Google Analytics) | Measuring how the Site is used: only if you consent | Usage/interaction data and a cookie-based identifier; IP address anonymized | United States / global |
We may update this list as our infrastructure evolves; the current version is always the one published here.
6. International data transfers
We are based in the United States and our providers store and process data in the United States and other countries. If you access the Site from outside the United States: including the European Economic Area, the United Kingdom, or Canada: your information will be transferred to and processed in countries whose data-protection laws may differ from those of your own. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for such transfers. By using the Site or contacting us, you understand your information will be handled as described here.
7. Data retention
We keep inquiry-form data for as long as needed to respond to and follow up on your request, to maintain business and accounting records, and to comply with legal obligations or resolve disputes. When we no longer have a legitimate need to retain it, we delete or anonymize it. You may ask us to delete your information sooner (see Section 9).
The one-way hashes used for abuse prevention are deleted automatically within about eight days. Audit reports are not stored on the Site: they exist only in the emails sent to you and to us.
8. Security
We take reasonable technical and organizational measures to protect your information, including transport encryption (HTTPS), access controls on our database, and reputable infrastructure providers. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security. Please avoid sending sensitive information through the inquiry form.
9. Your privacy rights
Depending on where you live, you may have some or all of the following rights. We honor these rights regardless of where you are located, to the extent applicable law allows.
- Access: request a copy of the personal information we hold about you.
- Correction: ask us to fix inaccurate or incomplete information.
- Deletion: ask us to delete your information.
- Portability: request your information in a portable format.
- Objection / restriction: object to or restrict certain processing.
- Withdraw consent: where we rely on consent, withdraw it at any time (without affecting prior processing).
- Opt out of sale / targeted advertising: we do not sell personal information or engage in cross-context behavioral advertising, so there is nothing to opt out of, but you retain this right.
- Non-discrimination: we will not discriminate against you for exercising your rights.
Florida residents. To the extent the Florida Digital Bill of Rights applies, you have the rights above regarding personal data we control.
California residents. Under the CCPA/CPRA you may request access, deletion, and correction, and you have the right to opt out of the sale or sharing of personal information: which we do not do.
EEA / UK residents. Under the GDPR you have the rights above and may lodge a complaint with your local supervisory authority.
To exercise any right, email info@komorebihub.com with your request. We may need to verify your identity before responding, and we will respond within the timeframe required by applicable law. You may use an authorized agent where the law permits.
10. Children’s privacy
The Site is a business-to-business service intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 (or under 16 in the EEA/UK). If you believe a child has provided us information, contact us and we will delete it.
11. Third-party links
The Site may link to third-party websites or services we don’t control. This Policy doesn’t apply to them, and we’re not responsible for their practices. Review their privacy policies before providing information.
12. Changes to this Policy
We may update this Policy from time to time. When we do, we’ll revise the “Last updated” date above, and for material changes we’ll take additional steps where required by law. Your continued use of the Site after an update means you accept the revised Policy.
13. Contact us
Questions, requests, or complaints about this Policy or your information can be sent to:
Komorebi Infrastructure LLC
Registered address: 7901 4th Street North, Ste. 300, St. Petersburg, FL 33702, United States
Privacy: info@komorebihub.com
General: info@komorebihub.com