Privacy Policy

Who we are

Kiavic ("Kiavic", "we", "us") provides an AI-assisted social growth platform for creators and businesses. This Privacy Policy explains what personal data we collect, why we process it, and the rights you have.

Controller contact: admin@kiavic.com. Website: https://kiavic.com.

Data we collect

Depending on how you use Kiavic, we may process:

• Account data: phone number, country code, session and device information
• Profile data: name, business details, niche/goals, profile photo
• Connected social accounts: Instagram (and related) usernames, scoped tokens (encrypted at rest on our servers), and automation/lead data you generate
• Collaboration discovery: name, niche, Instagram username, and profile photo may be shown to businesses in the same niche as a recently joined creator suggestion
• Product analytics: screen views, funnels, and in-app events (when analytics is enabled in your settings)
• Billing and referral data: plan/order records; KYC and payout details if you use referral earnings
• Support communications you send to us

Why we process data (purposes & lawful bases)

We process personal data to create and secure your account, deliver product features (planning, publishing assistance, automation, analytics), improve the service, process billing/referrals, and comply with law.

Depending on your region, our lawful bases include: performance of a contract (providing the service you request), legitimate interests (product security and improvement, where appropriate), consent (for optional analytics/marketing where required), and legal obligation.

How we share data

We use service providers (processors) to run Kiavic. Typical categories include cloud hosting, databases, messaging/SMS (when enabled), payment processors, AI model providers for content features, and Meta/Instagram for social integrations you connect.

We do not sell your personal data. We share data with platforms you connect only as needed to provide the features you enable.

If you join as a Creator or Both, businesses whose niche matches yours may see a short profile card (name, niche, Instagram username, and photo) so they can invite you to a campaign. This is in-product discovery only.

International transfers

Kiavic currently hosts primary infrastructure in AWS ap-south-1 (Mumbai, India). Some providers (for example Meta and OpenAI) may process data in other countries, including the United States.

Where required, we use appropriate safeguards such as contractual protections with vendors. Contact us if you need more detail for your situation.

Retention

We keep account data while your account is active. OTP codes expire quickly. Sessions expire per our auth configuration. After account deletion, we remove or anonymize personal data from active systems within a reasonable period, subject to legal retention needs and residual copies in encrypted backups that rotate out on a fixed schedule.

Your rights

Subject to applicable law, you may request access, correction, export, deletion, restriction, or objection to certain processing. In the Kiavic app you can export your data and delete your account from Profile settings. You can also email us at the address above.

You can turn off product analytics and marketing notification preferences in Profile settings. Where consent is required, you may withdraw it at any time without affecting processing that relies on another lawful basis.

Security

We use HTTPS in production, encrypt OTPs and Instagram access tokens at rest, hash admin passwords, and restrict admin access with roles and audit logging. No method of transmission or storage is perfectly secure; please protect your devices and session tokens.

Children

Kiavic is intended for creators and businesses, not for children. We do not knowingly collect personal data from children under the age applicable in your region. If you believe a child has provided data, contact us and we will take appropriate steps.

Changes

We may update this policy from time to time. The latest version will be published at https://kiavic.com/privacy with an updated “Last updated” date.