1. Who we are
Kepler26 is a division of Mody & Associates, Inc. In this policy, “Kepler26,” “we,” “us” and “our” refer to Mody & Associates, Inc. operating as Kepler26.
This policy applies to personal information handled through kepler26.com, our business communications and our consulting relationships. It does not replace any privacy terms in a signed client agreement. Where those terms conflict, the signed agreement governs the client engagement.
2. Information we collect
Information you provide
We may receive information such as:
- Your name, work email, organization and role.
- Details about a workflow, business need, project or source of operational friction.
- Correspondence, meeting details, proposal information and other records created while evaluating or delivering an engagement.
- Administrative information needed for contracts, invoicing and business records if you become a client or supplier.
Information generated through the website
Our hosting and security providers may process standard technical information such as IP address, browser and device type, requested pages, timestamps, referring pages and diagnostic or security events. We use this information to deliver, protect and maintain the website.
If you allow analytics, Google Analytics may process page views, interactions, session information, browser and device details, referring pages, approximate location derived from IP address and analytics identifiers. We use this information to understand aggregate website use and improve the site. Google Analytics is not used here for advertising or ad personalization.
The website stores your selected industry example and analytics choice in browser local storage under the keyskepler26-industry andkepler26-analytics-consent. These preferences are not a user account.
If you request resource access, Supabase processes your email address, authentication events, session identifiers and related security logs to send and verify passwordless sign-in links. The site uses secure authentication cookies to maintain a signed-in session.
3. Contact form and email
When you submit the contact form, the website sends your responses to a fixed Kepler26 inbox through Resend, our transactional email provider. The website does not currently save a separate copy in an application database, although the resulting email is retained in our business email systems according to our record-retention needs. The optional “Copy this brief” action writes the same information to your device clipboard.
Please do not include patient information, personal health information, confidential client material, unpublished clinical data, credentials or regulated records in an initial inquiry. Appropriate safeguards and transfer methods should be agreed before confidential material is shared.
4. How we use information
We may use personal information to:
- Respond to inquiries and evaluate whether Kepler26 is a fit.
- Prepare proposals and take steps requested before a contract.
- Deliver, administer and improve consulting services.
- Measure aggregate website use when you have allowed analytics.
- Maintain business, tax, accounting and contractual records.
- Protect our website, systems, clients and legal rights.
- Meet legal, regulatory and professional obligations.
Where applicable law requires a legal basis, we rely on consent, steps taken at your request before entering a contract, performance of a contract, compliance with legal obligations and our legitimate interests in operating and protecting our business. Google Analytics does not load or collect analytics information unless you give consent.
5. How we disclose information
We may disclose information to:
- Service providers that support hosting, email, document management, communications, security, accounting and business operations.
- Google, which provides Google Analytics when you allow analytics.
- Resend, which delivers contact-form and authentication email.
- Supabase, which provides authentication and will support gated content data under row-level security policies.
- Our technical partner, when its software engineering, solution architecture, cloud or cybersecurity specialists are required for a contracted engagement. Our technical partner is ISO 27001 certified. That certification applies to our technical partner and the scope of its certified information-security management system; it does not independently certify Kepler26, Mody & Associates, Inc. or a client implementation.
- Professional advisers such as legal, accounting, insurance and compliance advisers.
- Authorities or other parties when required by law, necessary to protect rights or safety, or relevant to a corporate transaction.
- Client-approved collaborators or suppliers needed to perform a contracted engagement.
We do not sell personal information, rent contact lists or use website activity to build advertising profiles.
6. International processing
Kepler26 is based in Toronto, Ontario, Canada and works globally. Our service providers or project collaborators may process information in Canada, the United States or other jurisdictions. Google may process analytics information in countries where it or its service providers operate. Information in another jurisdiction may be subject to that jurisdiction’s laws. We use contractual, organizational and technical measures appropriate to the information and the engagement.
When personnel from our technical partner support an engagement, team location does not by itself determine where client information is processed. Any access or processing is defined by the contracted scope and the approved systems, regions, providers, permissions and information boundaries for that engagement.
7. Retention and security
We retain personal information only for as long as reasonably needed for the purposes described above, including to manage an inquiry or engagement, meet legal and accounting requirements, resolve disputes and enforce agreements. Retention depends on the nature of the record, the sensitivity of the information and applicable obligations.
We use reasonable administrative, technical and organizational safeguards. No email, website or storage system can be guaranteed completely secure, so sensitive project information should be shared only through agreed channels.
8. Your choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction or portability of your personal information; object to certain processing; or withdraw consent. These rights may be subject to legal exceptions and record-retention requirements. You can change your analytics choice at any time through “Cookie settings” in the footer.
You may also complain to the privacy or data-protection authority in your jurisdiction. In Canada, information about federal privacy rights is available from the Office of the Privacy Commissioner of Canada.
9. Children, external sites and changes
This website is intended for business users and is not directed to children. We do not knowingly collect personal information from children through the website.
Links to external services are governed by those services’ own terms and privacy practices. We may update this policy as our services, providers or legal obligations change. The date shown on this page identifies the latest version.
10. Contact the Privacy Officer
To ask a privacy question or exercise a privacy right, email the Privacy Officer at support@kepler26.com. We may need to verify your identity before completing a request.