Privacy policy
How Kivoo collects, uses, shares and protects creators’, buyers’ and visitors’ data, and how to exercise your rights.
1. Who is responsible for your data
Kivoo [legal name, legal form and address to be specified] is the controller of the personal data collected on kivoo.africa, dashboard.kivoo.africa and kivoo.co. You can reach us at support@kivoo.africa.
Creators who receive their buyers’ contact details become responsible in turn for how they use them; the Terms of use limit that use to fulfilling the sale and answering buyers.
2. The data we collect
Kivoo only collects the data needed to run the service. There are no passwords: we store none.
- Creators: email address, name and profile picture when they come from a Google, Facebook or X account, identifier of the sign-in method used, preferred language, store information (name, country, currency, description, logo and banners, public contact email, public WhatsApp number, social media links), mobile number for sale alerts by SMS, products and files offered for sale, sales and balance history, payout details (Mobile Money number or bank details), exchanges with support.
- Buyers: email address (required for delivery), name, optional phone number given so the creator can reach you, Mobile Money number used to pay, order contents (products, amounts, dates), downloads and payment status. A purchase creates or attaches a Kivoo account to the email address used.
- Visitors: technical data needed for security and operation (IP address, browser and operating system, pages visited, timestamps, request identifier), contents of messages sent from a store’s contact form or from the Contact page on kivoo.africa (name, email, message).
3. Why we use it
This data is used only for the purposes below, based on the performance of our contract with you, on our legal obligations, on our legitimate interest in securing the service or, where the law requires it, on your consent.
- Create and manage accounts, sign users in with an email code or a third-party account, keep their session alive.
- Run the stores: host products and files, display public pages, process orders and deliver digital products.
- Collect payments and send payouts, keep each store’s balance, prevent fraud and handle complaints.
- Send the messages the service needs: sign-in code, order confirmation and download links, sale alert to the creator by email or SMS, payout updates, support replies. Kivoo does not send marketing messages without your agreement.
- Keep the platform secure: request rate limiting, abuse detection, technical logs.
- Meet our legal obligations, in particular accounting ones, and answer requests from competent authorities.
- Produce aggregated usage statistics to improve the service, without individual profiling.
5. Where your data is hosted
Data is hosted by our hosting provider [hosting country to be specified] and may be processed by our providers in countries other than yours. When that is the case, Kivoo makes sure those providers offer appropriate data-protection safeguards, in particular through contractual commitments.
6. How long we keep it
We keep data for as long as needed for the purposes described above, then delete or anonymise it.
- Account, stores and products: for the life of the account, then deleted or anonymised within thirty days of the account deletion, except data that must be kept longer by law.
- Orders, payments and payouts: ten years from the transaction, for accounting obligations and to answer possible disputes.
- Purchased files: available to the buyer as long as the product and the store exist; deleted with the store or the product.
- Sign-in sessions: expire after thirty days without activity; email sign-in code: ten minutes; download links sent by email: two hours.
- Messages sent to creators and to support: twenty-four months.
- Technical logs (IP address, requests): twelve months at most.
7. How we protect it
All communications with Kivoo are encrypted (HTTPS). There is no password to steal. Sign-in codes are stored hashed and expire after ten minutes; session identifiers are kept hashed on the server and the session cookie cannot be read by scripts. Product files are private and only reachable through signed links, valid for a few minutes, generated after a purchase.
Sign-in codes, session identifiers, third-party sign-in tokens and payout details are never written to our logs. Access to data is limited to the people who need it to run the service and support.
8. Your rights
Depending on the law that applies in your country, you have the right to access, rectify, erase, object to, restrict and port your data, and the right to withdraw your consent at any time when processing relies on it.
You can change your name and language, manage your sign-in methods and delete your account from your dashboard. For any other request, write to support@kivoo.africa from, or mentioning, your account’s email address; we may ask you to confirm your identity. We answer within one month.
You also have the right to lodge a complaint with the data-protection authority of your country.
10. Minors
Kivoo is not intended for people who lack the legal capacity to enter into contracts in their country. If you believe a minor has given us data without their legal guardian’s permission, write to us: we will delete it.
11. Changes to this policy
We may update this policy when the service or the law changes. The date of the version in force appears at the top of this page. In case of a material change, we inform account holders by email or from the dashboard.
12. Contact
For any question about your data or to exercise your rights, write to support@kivoo.africa.