Privacy Policy

Last updated: January 30, 2026

Our Commitment to Privacy

At Kaniva, we believe in transparency - not just in our pricing, but in how we handle your data. This policy explains what information we collect, how we use it, and your rights regarding your personal data.

The short version: We collect only what we need to provide our service, we never sell your data, and we use industry-standard security to protect it.

Information We Collect

Account Information

When you create an account, we collect:

  • Name and email address
  • Password (stored encrypted - we can never see it)
  • Phone number (optional)

Store Information

When you create a store, we collect:

  • Store name and settings
  • Products, categories, and inventory
  • Customer orders and transaction records
  • Files you upload (images, digital products)

Payment Information

Important: We do NOT store credit card numbers, CVV codes, or sensitive payment data. All payment processing is handled by PCI-compliant third parties (Stripe and PayPal). We only store:
  • Transaction IDs and references
  • Payment amounts and dates
  • Payment method type (e.g., "Visa ending in 4242")

Automatically Collected Information

When you use Kaniva, we automatically collect:

  • IP address and browser type
  • Pages visited and actions taken
  • Device information
  • Cookies for session management

How We Use Your Information

We use collected information to:

  • Provide our service - Run your store, process orders, deliver digital products
  • Communicate with you - Send order confirmations, support responses, important updates
  • Improve Kaniva - Analyze usage patterns to make the platform better
  • Prevent fraud - Detect and prevent fraudulent transactions and abuse
  • Legal compliance - Meet legal obligations and respond to lawful requests
We never:
  • Sell your personal data to third parties
  • Share your data for advertising purposes
  • Use your store data to compete with you
  • Access your store without permission (except for support when requested)

Data Storage & Security

Separate Database Architecture

Each store on Kaniva has its own dedicated database. This means your store data is completely isolated from other merchants, providing an extra layer of security and privacy.

Security Measures

  • 256-bit SSL/TLS encryption for all data transmission
  • Encrypted password storage using bcrypt
  • Regular automated backups
  • Firewall and intrusion detection systems
  • Regular security updates and monitoring

For more details, see our Security page.

Third-Party Services

We use the following third-party services to operate Kaniva:

Payment Processing

Infrastructure

  • Hosting providers - Secure data centers with physical security
  • Email services - For transactional emails (order confirmations, etc.)

Your Rights

You have the right to:

  • Access your data - Request a copy of all data we have about you
  • Correct your data - Update inaccurate or incomplete information
  • Delete your data - Request deletion of your account and store data
  • Export your data - Get your data in a portable format
  • Restrict processing - Limit how we use your data in certain circumstances

To exercise any of these rights, contact us at privacy@kaniva.io.

Data Retention

We retain your data as follows:

  • Active accounts - Data is retained while your account is active
  • Deleted accounts - Most data is deleted within 30 days of account deletion
  • Transaction records - Retained for 7 years for legal/tax compliance
  • Backup data - Removed from backups within 90 days of deletion

Cookies

We use cookies for:

  • Essential cookies - Required for login and basic functionality
  • Session cookies - Keep you logged in during your visit
  • Preference cookies - Remember your settings

We do not use third-party advertising or tracking cookies. You can disable cookies in your browser, but some features may not work properly.

Children's Privacy

Kaniva is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice on our website. Your continued use of Kaniva after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy or how we handle your data, contact us at: