Privacy Policy

Kivora ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit Kivora and use our platform tools.

By using Kivora, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the platform.

Information you provide: When you create an account, we collect your email address and optionally your full name and onboarding preferences (your goal, experience level, location, and interests).

Usage data: We collect information about how you use the platform, including which tools you use, what queries you search, and which pages you visit. This data is used to improve the platform and personalize your experience.

Automatically collected data: We collect your approximate location based on IP address to suggest your local currency. We do not store your precise location.

Chat and saved content: If you are logged in, your chat sessions and saved opportunity results are stored in our database so you can access them across devices.

• To provide, operate, and improve the Kivora platform
• To personalize your experience based on onboarding answers
• To detect and suggest your local currency
• To save and display your chat history and saved results (if logged in)
• To send transactional emails (account confirmation, password reset)
• To analyze platform usage and improve features
• To prevent abuse and enforce our Terms of Service

We do not sell your personal data. We do not serve ads. We do not share your data with third parties for marketing purposes.

Kivora uses the following third-party services to operate:

• Supabase: database and authentication provider
• Groq: AI inference provider that processes your queries
• Cloudflare: hosting, CDN, and DDoS protection
• ipapi.co: IP-based country detection (no stored data)
• ExchangeRate-API: currency conversion rates

Each of these services has their own privacy policies. We encourage you to review them. We use only the data necessary to operate the platform and do not share excess data with providers.

Your data is stored in Supabase (PostgreSQL) with row-level security enabled. This means users can only access their own data, not other users' data.

We use HTTPS for all data in transit. Passwords are hashed by Supabase Auth and are never stored in plain text.

We do not store payment information. Kivora is free and does not process payments.

Account data is retained as long as your account exists. If you delete your account, your profile, saved results, and chat history are permanently deleted within 30 days.

Explore cache results (opportunity guides) are not tied to user accounts and may persist for the benefit of all users.

Kivora uses browser localStorage to store your currency preference and anonymous session state. No advertising cookies are set. We use Umami Analytics which is cookieless and GDPR-compliant.

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at the email below. We will respond within 30 days.

Kivora is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided personal information, contact us immediately.

We may update this policy periodically. We will notify registered users by email for material changes. Continued use of the platform after changes constitutes acceptance.

For privacy-related questions, contact us at: privacy@kivora.com