Privacy Policy

1. Introduction

Kaviwebdesigns ("we", "us", or "our") operates KaviAI at kaviagentic.com. This Privacy Policy explains how we collect, use, and protect your information when you use our Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

• Account information — name, email address, and password when you sign up
• Brand profile data — brand name, description, voice settings, target audience, and hashtags you provide
• Connected account tokens — OAuth access tokens for social media platforms you connect (stored securely)
• Usage data — pages visited, features used, and actions taken within the Service
• Website data — URLs you submit for AI autofill, which we fetch and process server-side

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Connect to and interact with social media platforms on your behalf
• Generate AI content suggestions tailored to your brand profile
• Send service-related emails (account verification, important updates)
• Detect and prevent fraud or abuse

4. Connected Social Media Accounts

When you connect a social media account, we store OAuth access tokens to interact with those platforms on your behalf. We use these tokens only to perform actions you explicitly request (such as publishing content). We do not sell or share your social media tokens with third parties. You can disconnect any account at any time, which will delete the stored token from our systems.

5. AI Processing

Content you create and website URLs you submit may be sent to third-party AI providers (currently Google Gemini) to generate suggestions. These providers process data according to their own privacy policies. We do not use your data to train AI models.

6. Data Storage and Security

Your data is stored securely using Supabase, a managed database platform with row-level security. Access tokens are stored encrypted at rest. We implement industry-standard security measures, but no method of transmission over the internet is 100% secure.

7. Data Sharing

We do not sell your personal data. We share data only with:

• Service providers — Supabase (database), Vercel (hosting), Google (AI), who process data on our behalf
• Social media platforms — when you authorize connections and request publishing actions
• Legal requirements — when required by law or to protect our rights

8. Data Deletion

You may request deletion of your account and all associated data at any time by contacting us at kaviwebdesigns@gmail.com. We will delete your data within 30 days of the request. Disconnecting a social media account immediately deletes the associated access token from our systems.

9. Cookies

We use cookies solely for authentication purposes (session management via Supabase). We do not use advertising or tracking cookies.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

11. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at kaviwebdesigns@gmail.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. Continued use after changes take effect constitutes acceptance of the revised policy.

13. Contact

For privacy-related questions or data deletion requests, contact us at kaviwebdesigns@gmail.com.