Privacy Policy

1. Introduction

Kiwot (KiwotCloud OU, Sepapaja tn 6, Tallinn, 15551, Estonia) builds AI systems for business operations. We respect your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable privacy laws.

2. GDPR Compliance

We are fully compliant with the General Data Protection Regulation (GDPR). You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data. To exercise these rights, contact us at hello@kiwot.io.

3. Information We Collect

4. How We Use Your Information

• Provide and improve our AI-powered services
• Power AI features within our products
• Process payments and manage subscriptions
• Send service updates and communications (with your consent)
• Analyze platform usage to improve features
• Comply with legal obligations

5. AI and Data Processing

Kiwot products use AI models to deliver features. When you use AI features, your data may be processed by third-party AI providers under strict data processing agreements. Data is encrypted in transit and at rest. AI providers do not use your data to train their models per our agreements. Personal data is minimized before AI processing where possible.

6. Data Storage and Security

Your data is stored securely on Supabase (EU servers in Frankfurt). We implement industry-standard security measures including encryption at rest, encrypted connections (TLS), access controls, and regular security reviews.

7. Data Sharing

We do not sell your personal data. We may share data with service providers who help us operate our products (AI providers, payment processors, hosting), and when required by law. In the event of a business transfer, data may be included as part of the transferred assets.

8. Cookies and Tracking

We use essential cookies to operate our platform. Optional analytics cookies help us improve our service. You can control cookie preferences in your browser settings.

9. Your Rights (GDPR)

10. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for up to 30 days for backup and legal compliance purposes, after which it is permanently deleted.

11. Children's Privacy

Kiwot services are not intended for users under 18 years of age. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or platform notification. Continued use after changes constitutes acceptance of the updated policy.

13. Contact Us