Karakor
Privacy

A privacy policy written to be read, not skimmed. Plain language, dated, honest about what we collect and what we do not.

Last updated · May 12, 2026

01

Who this policy is from

Karakor Consulting (“Karakor,” “we”) is a cybersecurity and software consulting firm headquartered in Westchester, Illinois, in the United States. This policy describes how the public website at karakorconsulting.com handles information about visitors, prospective clients, and people who interact with our Tulgra product through this site.

Tulgra itself runs on the firm’s own infrastructure. The policy below covers the marketing and licensing surface. The product’s data handling is governed separately by the Tulgra End-User License Agreement and product documentation delivered with the application.

02

What the website collects

We use a privacy-respecting analytics tool to count page views and understand which content visitors read. The analytics are aggregate. We do not assign you an identifier, we do not track you across other websites, and we do not set advertising cookies.

The analytics record, in aggregate:

  • The pages requested and the order they were requested in.
  • The approximate country the request came from, derived from the IP address and discarded after the country is recorded.
  • The device type (desktop or mobile) and browser family.
  • The referring website, if any.

The site sets only the cookies strictly necessary for it to function. There is no cookie banner because there is no consent choice to offer — we do not run tracking or advertising cookies that would require one.

03

When you contact us

If you write to info@karakorconsulting.com or use a contact link on this site, your email reaches a mailbox operated by Karakor. We keep the message for as long as the conversation is active, plus a reasonable retention period afterward in case the matter is revived. We do not add inbound contacts to a marketing list.

The information you choose to share in a message — your name, your firm, the work you are exploring — is held under the same discipline we apply to any client material that crosses our desks. We do not share it with third parties except as required to deliver a referral when one has been explicitly requested, or as required by law.

04

Tulgra trial and license requests

Requests for a Tulgra trial license or a paid license are submitted through forms hosted on Microsoft Forms. When you complete one of these forms, the submission is delivered to Karakor and to a Karakor-controlled record store (currently Microsoft 365 and Firebase) where we generate the license and send it to you.

The form submission typically includes:

  • Your name and the name of your firm.
  • The email address the license should be issued against.
  • Basic context about your practice and intended use, where the form asks for it.
  • For paid license requests, any procurement or billing contact information you provide.

We use this information to issue the license, to maintain the license record for the term of the agreement, and to communicate with you about the license — renewal, support, security advisories. We do not sell it. We do not share it with third parties except as needed to deliver the licensed software or as required by law.

05

The Tulgra download form

The Tulgra page on this site offers a public download of the installer for visitors who already have a license, or who want to see the installation experience before requesting one. The application is activated inside the firm by the firm administrator (using the license key issued at purchase); team members sign in with an invitation code the administrator sends them. The installer itself does not require a key to download.

Before revealing the download links, the page invites you to fill out a short Microsoft Form (name, work email, firm name, and how you heard about us). The form is optional — we do not block the download on its submission — and the information you provide is delivered to Karakor through the same Microsoft Forms pipeline that handles trial and license requests, then stored alongside our other lead records.

We use the lead information to learn who is interested in Tulgra, to follow up where it is appropriate, and to size the firms we are talking with. We do not sell it. We do not share it with third parties except as required by law.

06

How long we keep things

We hold information for as long as it is useful for the purpose it was collected and no longer:

  • Analytics records are aggregate from collection. Individual request lines are discarded after a short rolling window.
  • Contact messages are retained for the life of the conversation plus a reasonable follow-up period. Messages that did not lead to an engagement are purged on a regular cadence.
  • License records are retained for the term of the license agreement and for the period afterward required by tax, accounting, and contractual obligations.

If you would like us to delete information we hold about you earlier than the schedule above, write to info@karakorconsulting.com and we will respond.

07

Sub-processors and infrastructure

The website is hosted on Vercel. Forms are operated through Microsoft Forms; license records and downloads are stored with Microsoft 365 and Firebase (Google Cloud). Email reaches us through standard business email infrastructure. Each of these providers maintains its own security and privacy controls; we select them with the same threat-model discipline we apply on client engagements.

We do not transmit visitor data to advertising networks, third- party analytics platforms beyond the one disclosed above, or data brokers of any kind.

08

Your rights

You can ask us, at any time, what information we hold about you and request that we correct it or delete it. Write to info@karakorconsulting.com and we will respond.

For California residents. The California Consumer Privacy Act gives you the right to know what personal information we collect about you, to request deletion, to request correction, and to opt out of the sale or sharing of personal information. We do not sell or share personal information for advertising. You can exercise the access, deletion, and correction rights by emailing us at the address above.

For visitors in the European Union and United Kingdom. If you are accessing this site from the EU or UK, you have rights under the General Data Protection Regulation and the UK GDPR — access, correction, deletion, restriction, portability, and objection. You can exercise any of these rights by emailing us. We process the small amount of data this site collects on the basis of our legitimate interest in operating a professional website and responding to inbound inquiries; for license requests, the legal basis is the performance of the contract you are entering into.

09

Children

This site is intended for business audiences. We do not knowingly collect personal information from anyone under the age of sixteen. If you believe we have inadvertently received information from a minor, write to us and we will delete it.

10

Changes to this policy

We will update this page when our practices change. The date at the top of this page reflects the most recent revision. Material changes will be highlighted at the top of this page for a reasonable period after the revision.

11

How to reach us

Questions about this policy, or about the information we hold, should be directed to:

Karakor Consulting
One Westbrook Corporate Center, Suite 300
Westchester, Illinois 60154
United States
info@karakorconsulting.com

This policy is governed by the laws of the State of Illinois and the United States.

Engage

We respond within two business days. Scoping calls are obligation-free and run thirty minutes.