Privacy Policy

Kavilo provides software that helps trade and field-service businesses manage jobs, scheduling, time tracking, materials, and related records. If your employer uses Kavilo, your employer is the “controller” of your data and Kavilo acts as a “processor” on their behalf. For account and billing data of the business itself, Kavilo is the controller.

Contact for any privacy question or request: inboxkavilo@gmail.com.

We collect the following categories of information:

• Account & company details: business name, address, contact details, and the name, email and role of each user.
• Operational data you enter: jobs, clients, time entries, daily logs, notes, photos and files, materials, costs, vehicles, and similar records.
• Location data (GPS): only when an employer enables location for clock-in and the user grants permission in their browser. Used to show team location while a shift is open.
• Payment data: subscription and billing are handled by Stripe. We do not store full card numbers.
• Technical data: sign-in/session information, device and browser details, IP address, and error/diagnostic logs.

We use information to:

• provide, operate and secure the Service;
• authenticate users and protect accounts;
• process subscriptions and payments;
• send service-related notifications (e.g. approvals, requests);
• diagnose problems and improve reliability and features;
• comply with legal obligations.

Where the GDPR applies, we rely on: performance of a contract (to provide the Service), legitimate interests (to secure and improve the Service), consent (e.g. for location sharing), and legal obligations. You may withdraw consent at any time, for example by turning off location permission in your browser.

We use trusted providers to run the Service. They process data only to provide their service to us:

• Vercel — application hosting.
• Neon — managed PostgreSQL database.
• Cloudflare R2 — file and photo storage.
• Stripe — payment processing.
• Sentry — error monitoring.

We do not sell personal information, and we do not allow advertisers to target you through the Service.

Kavilo serves businesses worldwide, and our providers may store and process data in countries outside your own (including the United States, the European Union, and the Asia-Pacific region). Where required, we rely on appropriate safeguards for such transfers.

We keep personal information for as long as the relevant account is active and as needed to provide the Service, then for a reasonable period to meet legal, accounting and dispute-resolution needs. Deleted records may remain in backups for a limited time before being overwritten. A business can request deletion of its data (see “Your rights”).

We protect information using encryption in transit (HTTPS), hashed passwords, access controls that isolate each business’s data, and regular backups with point-in-time recovery. No system is perfectly secure, but we work to protect your information and to respond promptly to any incident.

Depending on your location, you may have the right to access, correct, delete, export, or object to the processing of your personal information, and to lodge a complaint with a privacy regulator. If your employer controls the data, we may direct your request to them. To make a request, email inboxkavilo@gmail.com.

We use strictly necessary cookies to keep you signed in and to remember basic preferences (such as language). We do not use advertising cookies. See our Cookie Policy for details.

The Service is intended for businesses and their workers and is not directed at children. We do not knowingly collect personal information from children.

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notifying you within the Service.

Questions or requests about privacy? Email inboxkavilo@gmail.com.