Privacy Policy

1. What we collect

Account details: your name, email address, the name you want us to use, your work role, an optional profile photo, the people you invite and their roles.

Amazon account data, only with the permissions you grant on Amazon's sign-in page: orders, fees, payments and reimbursements, inventory, listings, reports and account health. Order and return records can contain buyer details such as a name or a city; see section 5 for how we limit and delete them.

Files you upload, the questions you ask Kivolla, the answers it gives and the tasks you approve or decline.

Billing details: your plan, invoices and payment status from Stripe. We never receive your full card number.

Technical data: sign-in times, the device and browser you use, and logs we need to keep Kivolla secure and working. We use only the cookies needed to keep you signed in; we do not use advertising cookies.

2. Why we use it

To run Kivolla for you: read your data, find problems, draft tasks and answer your questions (this is needed to perform our contract with you).

To bill you, keep the service secure, prevent abuse and meet legal and tax duties.

To improve how Kivolla works for your account. Kivolla learns from your own decisions for your own account. We never use one seller's data to answer or advise another seller, and we never sell personal data.

To send you service messages, such as sign-in codes, billing notices and important changes. We send marketing emails only if you agree, and every one has an unsubscribe link.

3. AI and your data

Kivolla's answers are written by AI models run on Amazon Bedrock, inside Amazon Web Services. Under AWS's terms, your data is not used to train those models and is not shared with the companies that make them.

If we ever add another AI provider that would receive your data, we will update this policy and tell you before it happens.

4. Who we share it with

Only the service providers we need to run Kivolla, each bound to protect your data and use it only for us: Amazon Web Services (hosting, storage, AI and email, in the United States) and Stripe (payments).

We share data when the law requires it, to protect our users or the service, or with a buyer of our business, who must keep this policy's promises. We never sell personal data.

5. Where we keep it and for how long

Your data is stored on Amazon Web Services in the United States, encrypted in transit and at rest.

We keep your account and Amazon data while your account is active. Buyer personal details from orders and returns are removed within 30 days of the order's delivery unless we must keep them longer for tax or legal reasons.

When you disconnect an Amazon account or close your Kivolla account, we delete the related data within 30 days. Backups are overwritten within a further 7 days. We keep invoices and records the law requires us to keep, for as long as it requires.

6. How we protect it

Encryption, sign-in with one-time codes and optional two-step verification, access limited to the people who need it, activity logs and regular security reviews. If a breach affects your data, we will tell you and the authorities as the law requires, and we report incidents involving Amazon data to Amazon within 24 hours.

7. Your rights

You can ask to see, correct, export or delete your personal data, and withdraw any consent you gave. Many of these you can do yourself in Settings; for the rest, email us and we will answer within 30 days.

If you are in the European Economic Area or the United Kingdom, you have rights under the GDPR, including to object and to complain to your data protection authority. If you are in California, you have rights under the CCPA; we do not sell or share personal information for advertising.

Grievance officer (India, Digital Personal Data Protection Act 2023): Neel Madhav Singha Roy, hello@kivolla.com.

8. Children

Kivolla is for businesses and is not meant for anyone under 18. We do not knowingly collect children's data.

9. Changes

We will post any change here with a new date, and tell you by email or in the app before an important change applies.