1. Overview
This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit kavoren.com, contact us, or use our products and services including Zentro, StackRoll, and Catan League. If a product has an in-app privacy notice, that notice controls for that product.
2. Information we collect
We collect the following categories of personal information:
- Contact and account data. Name, email, company, role, and any information you include when you contact us or request a proposal.
- Transactional data. Project scopes, invoices, payments, and contract records. Payment card details are processed by our payment provider and are not stored by us.
- Usage data. Site analytics, device and browser information, pages viewed, referral sources, and timestamps.
- Product data. Content and telemetry generated inside our apps to operate the service, detect abuse, and improve reliability.
- Support communications. Feedback, bug reports, and support conversations.
- Log data. Server and application logs including IP addresses, request metadata, and error traces.
3. How we use information
We use personal information to:
- Provide, operate, and secure our site, services, and applications.
- Communicate with you about proposals, updates, and support.
- Configure projects, authenticate access, and process payments.
- Monitor performance, debug, and improve features and reliability.
- Comply with legal obligations and enforce agreements.
- If you opt in, send marketing communications (you can opt out at any time).
4. Cookies and analytics
We use cookies and similar technologies for essential functionality and analytics. You can control cookies through your browser settings. Where required by law, we will present a consent banner for non-essential cookies.
5. AI tools and data handling
We may use reputable AI services to assist with development and support. We avoid sending client confidential information to AI tools unless the tool provides enterprise-grade confidentiality or you explicitly consent. We design prompts and safeguards to minimize exposure of personal data.
6. Legal bases for processing (EEA/UK users)
Where GDPR or UK GDPR applies, our legal bases include performance of a contract, legitimate interests (such as securing and improving services), compliance with legal obligations, and consent where required for specific activities like certain marketing or non-essential cookies.
7. Sharing and disclosures
We share information with:
- Service providers and subprocessors that help us operate, including hosting, analytics, email, error tracking, CI/CD, storage, payments, and customer support.
- Contractors and freelancers working under confidentiality and data protection obligations.
- Legal and compliance recipients where required by law or to protect rights and safety.
- Business transfers if we sell or reorganize our business.
We do not sell personal information. We may disclose de-identified or aggregated data that does not identify individuals.
8. International transfers
We operate from Canada and may process information in Canada, the United States, and other countries. When personal information is transferred internationally, we use appropriate safeguards such as contractual commitments.
9. Data retention
We retain personal information as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, we take reasonable steps to delete or de-identify information.
10. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure.
11. Your rights and choices
Marketing. You can opt out of marketing emails by using unsubscribe links.
Access, correction, deletion. You may request access to, correction of, or deletion of your personal information, subject to legal limits.
EEA/UK users. You may have rights to data portability, restriction, objection, and to lodge a complaint with your supervisory authority.
California users. We do not sell personal information. You may request access or deletion subject to legal exceptions.
To exercise rights, email privacy@kavoren.com. We may need to verify your identity before responding.
12. Children's privacy
Our site and services are not directed to children under 13, and we do not knowingly collect personal information from them.
13. Third-party links and app stores
Our site and apps may link to third-party websites or app stores. Those services are governed by their own policies.
14. Product-specific notes
- Zentro. May process list items, categories, and usage telemetry to power features like AI grouping and sync.
- StackRoll. May process poker session data, venues, stakes, and results to power analytics and history.
- Catan League. May process league, game, and player statistics.
Each product will only process what it needs to function, and in-app notices will explain additional data collection if required.
15. Data processing addendum
If you need a data processing addendum (DPA) to meet regulatory or contractual requirements, contact privacy@kavoren.com and we will provide one.
16. Changes to this policy
We may update this Policy from time to time. The updated version will be posted here with a new effective date. Material changes will be highlighted for a reasonable period.
17. Contact
For privacy questions or requests, email privacy@kavoren.com.