Privacy policy
Last Updated: April 1, 2026 · Effective Date: April 1, 2026
Krove IT (DBA of MDFG Inc, “Krove,” “we,” “us,” or “our”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights.
01 — Who This Policy Applies To
- – Visitors to krove.com and related websites
- – Prospects who submit contact or lead forms
- – Current and former clients receiving IT managed services
- – Individuals who contact us via SMS, phone, or social media
02 — What Data We Collect and How
Website Visitors- IP address, browser type, pages visited
- No personal data unless you submit a form
Contact & Lead Forms- Name, company, email, phone
- Nature of inquiry
- Consent to be contacted via phone or email
Service Clients- Business contact information
- Technical environment data
- Billing info via QuickBooks (no card data stored)
- Support ticket content and history
SMS Interactions- Mobile number (only if you text us first)
- Support message content
- See Section 07 →
Social MediaPublic profile information when you interact with our social media accounts
(comments, direct messages).
03 — How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|
| Respond to inquiries | Name, email, phone | Consent (form submission) |
| Deliver IT managed services | All
client data | Contract performance |
| IT support via SMS | Mobile phone number | Consent (inbound SMS) |
| Billing and invoicing | Client
contact & billing data | Contract / Legal obligation |
| Website analytics | IP, browser, behavior | Legitimate interest |
| Marketing (prospects only) | Name,
email, phone from lead forms | Consent (form submission) |
| AI-assisted ticket summaries | Ticket content (no PII sent to AI) | Legitimate interest |
04 — Data Sharing and Third Parties
Each provider operates under a data processing
agreement and may only use your data for the stated purpose.
| Service | Provider | Data Shared | Purpose |
|---|
| Google Analytics | Google
LLC | IP, behavior, pages visited | Website
analytics |
| Google Ads | Google LLC | Email, phone (lead forms only ¹) | Advertising & remarketing |
| LinkedIn Ads | LinkedIn
Ireland | Email, phone (lead forms only ¹) | B2B
advertising |
| Meta (FB / IG) | Meta Platforms Inc. | Email, phone (lead forms only ¹) | Advertising & remarketing |
| QuickBooks Online | Intuit
Inc. | Name, address, billing data | Invoicing
& financial records |
| Atera | Atera Networks | Ticket data, client contact info | Ticketing & service records |
| TechSurf | MDFG Inc.
(internal) | Contact data, tickets, chat
& call records | IT service management |
| Twilio | Twilio Inc. | Mobile number, SMS content | SMS delivery (support only) |
| LiveChat | LiveChat Inc. | Chat messages, interaction data | Customer
communication |
| SentinelOne | SentinelOne Inc. | Site provisioning data only | Cybersecurity infrastructure |
| Hudu | Hudu Inc. | Documentation references | IT documentation |
¹ Phone numbers shared with Google Ads, LinkedIn, and Meta come exclusively from prospect lead forms. SMS support numbers are never shared with advertising platforms.
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
05 — Direct Marketing and Communications
- Email: Service-related and occasional promotional emails. Every email includes an unsubscribe link.
- Phone: We may call numbers provided via lead forms or service agreements. Request removal at helpdesk@krove.com.
- Social media: We may respond to public comments and direct messages on our social pages.
SMS is not used for marketing. SMS is used exclusively to respond to clients who initiate contact via SMS for IT support. See Section 07.
06 — Cookies and Tracking Technologies
| Type | Purpose | Can Be Declined |
|---|
| Essential | Required for website
functionality | No |
| Analytics | Track usage
— Google Analytics | Yes |
| Advertising | Remarketing — Google, LinkedIn, Meta | Yes |
Manage preferences through the consent banner on first
visit or via your browser settings.
07 — SMS Communications
Inbound-only policy: Krove only sends SMS to individuals who have first contacted us by texting our support number. We do not initiate unsolicited SMS. If you contacted us by phone, email, or web form, you will not receive an SMS unless you also separately text us.
What we send: Help desk ticket updates, technician dispatch notifications, and real-time support coordination.
How consent works: When you send us your first SMS, our system responds:
“Krove IT Support: Thanks for reaching out. We’ll assist you via SMS. Msg & data rates may apply. Reply STOP
to stop, HELP for help.”
Your continued engagement constitutes consent to communicate via SMS for your support interaction.
Frequency: Varies — typically 1–5 messages per support incident
Rates: Message and data rates may apply
Opt-out: Reply STOP — one confirmation, then no
further messages
Re-subscribe: Reply START
Carriers: Not liable for delayed or undelivered messages
Third-party sharing: No mobile information will be shared with third parties for marketing purposes. SMS opt-in data will not be shared with any third parties except Twilio (SMS delivery). SMS numbers are never shared with Google Ads, LinkedIn, or Meta.
SMS Terms: https://www.krove.com/terms-of-service-for-sms/
08 — Data Retention
| Data Type | Retention Period |
|---|
| Lead form submissions | 3 years or until deletion
requested |
| Client service records | Contract duration + 5 years |
| SMS support interactions | 2 years |
| Website analytics | 14
months (Google Analytics default) |
| Financial / billing records | 7 years (IRS requirement) |
To request deletion: helpdesk@krove.com. Some records may be retained in anonymized form for legal purposes.
09 — International Data Transfers
Our primary operations and clients are based in the United States. We provide
IT support to one enterprise client with operations in Colombia — their data is handled with the same standards as all other client data. Data processed by third-party providers (Google, LinkedIn, Meta, Intuit, etc.) may be stored on servers outside your jurisdiction, subject to their
respective data transfer safeguards.
10 — Your Privacy Rights
All
Users- Access your data
- Correct inaccurate data
- Request deletion
- Opt out of marketing
California
(CCPA)- Know what’s collected & shared
- Opt out of data sales (we don’t sell)
- Non-discrimination
Colombia
(Ley 1581)- Access, update, rectify, delete
- File complaints with SIC
To exercise any of these rights: helpdesk@krove.com or +1 954-741-2972. Response within 30 days.
11 — Security
- Encrypted data transmission (HTTPS/TLS)
- Access controls limiting data to authorized personnel
- Regular security audits and vulnerability monitoring
- Secure credential management for all third-party integrations
12 — Children’s Privacy
Our services are directed to businesses and professionals. We do not knowingly
collect personal information from individuals under 13 years of age.
13 — Changes to This Policy
We may update this policy periodically. Material changes will be noted with an
updated “Last Updated” date. Continued use of our services constitutes acceptance of
the revised terms.
