Privacy Policy

What we collect

Account data — your email address and sign-in identifiers. Business & content data — the business details, brand assets, prompts, and generated output (sites, posts, emails, images, videos) you create in Kovaro. Billing data — your plan, credit balance, and payment history; card details are handled by Stripe and never touch our servers. Usage data — basic product analytics and error logs so we can keep the service working.

Where it lives and how it's protected

Your data is stored in Supabase (our hosted database), encrypted at rest and in transit (TLS). Some in-progress work is also kept in your browser's local storage on your device. Access to production data is restricted to what's needed to operate the service.

How we use it

To provide the service: generate your content, publish your sites, run your automations, process payments, and respond to support. We also use aggregate usage data to improve the product. We do not sell your personal data, and we do not use your business data to market to your customers.

Subprocessors

Kovaro relies on a small set of infrastructure and AI providers to deliver the service. Data is shared with them only as needed to perform the work you request:

• Anthropic — AI text generation and reasoning
• OpenAI — image generation and transcription
• Higgsfield — video generation
• Stripe — payments, subscriptions, and billing
• Resend — transactional and campaign email delivery
• Vercel — application hosting and publishing
• Supabase — database and storage
• Composio — posting to social platforms you connect

Connected accounts

If you connect a social or service account, we store the access token needed to act on your behalf. Disconnecting the account in Connections revokes that token immediately. See Data Deletion for details.

Retention & deletion

We keep your data while your account is active. You can delete your server-side business data anytime from Settings, follow the steps on the Data Deletion page, or email support@kovaro.org and we'll erase everything tied to your account. We may retain minimal records where the law requires (e.g. tax and billing records).

Your rights

You can request access to, correction of, export of, or deletion of your personal data by emailing support@kovaro.org. We respond to verified requests within 30 days or as required by applicable law (including GDPR and CCPA where they apply).

Children

Kovaro is not directed to children under 13 and we don't knowingly collect their data.

Changes & contact

If we make material changes to this policy we'll update this page and the date above. Questions? Email support@kovaro.org. Kovaro is operated from Nevada, USA, and this policy is governed by Nevada law.