Privacy Policy

Last updated: October 23, 2026

Our Commitment to Privacy

At Kaniva, we believe in transparency - not just in our pricing, but in how we handle your data. This policy explains what information we collect, how we use it, and your rights regarding your personal data.

The short version: We collect only what we need to provide our service, we never sell your data, and we use industry-standard security to protect it.

Information We Collect

Account Information

When you create an account, we collect:

  • Name and email address
  • Password (stored encrypted - we can never see it)
  • Phone number (optional)

Store Information

When you create a store, we collect:

  • Store name and settings
  • Products, categories, and inventory
  • Customer orders and transaction records
  • Files you upload (images, digital products)

Payment Information

Important: We do NOT store credit card numbers, CVV codes, or sensitive payment data. All payment processing is handled by PCI-compliant third parties (Stripe and PayPal). We only store:
  • Transaction IDs and references
  • Payment amounts and dates
  • Payment method type (e.g., "Visa ending in 4242")

Automatically Collected Information

When you use Kaniva, we automatically collect:

  • IP address and browser type
  • Pages visited and actions taken
  • Device information
  • Cookies for session management and site analytics (see Cookies)

How We Use Your Information

We use collected information to:

  • Provide our service - Run your store, process orders, deliver digital products
  • Communicate with you - Send order confirmations, support responses, important updates
  • Improve Kaniva - Analyze usage patterns to make the platform better
  • Prevent fraud - Detect and prevent fraudulent transactions and abuse
  • Legal compliance - Meet legal obligations and respond to lawful requests
We never:
  • Sell your personal information, or share it for targeted advertising
  • Share your data for advertising purposes
  • Use your store data to compete with you
  • Access your store without permission (except for support when requested)

Data Storage & Security

Separate Database Architecture

Each store on Kaniva has its own dedicated database. This means your store data is completely isolated from other merchants, providing an extra layer of security and privacy.

Security Measures

  • 256-bit SSL/TLS encryption for all data transmission
  • Encrypted password storage using bcrypt
  • Regular automated backups
  • Firewall and intrusion detection systems
  • Regular security updates and monitoring

For more details, see our Security page.

Third-Party Services

We use the following third-party services to operate Kaniva:

Payment Processing

Infrastructure

  • Hosting providers - Secure data centers with physical security
  • Email services - For transactional emails (order confirmations, etc.)

Analytics

Your Rights

You have the right to:

  • Access your data - Request a copy of all data we have about you
  • Correct your data - Update inaccurate or incomplete information
  • Delete your data - Request deletion of your account and store data
  • Export your data - Get your data in a portable format
  • Restrict processing - Limit how we use your data in certain circumstances

To exercise any of these rights, contact us at privacy@kaniva.io.

Data Retention

We retain your data as follows:

  • Active accounts - Data is retained while your account is active
  • Deleted accounts - Most data is deleted within 30 days of account deletion
  • Transaction records - Retained for 7 years for legal/tax compliance
  • Backup data - Removed from backups within 90 days of deletion

Cookies

We use cookies for:

  • Essential cookies - Required for login and basic functionality
  • Session cookies - Keep you logged in during your visit
  • Preference cookies - Remember your settings
  • Analytics cookies - Google Analytics counts visits and shows us which pages are used, so we can improve the site

We do not use advertising cookies, and we do not sell or share the information analytics cookies collect. You can block cookies in your browser, or opt out of Google Analytics with Google's opt-out add-on. Blocking essential cookies will stop login and checkout from working.

Stores on Kaniva can add their own analytics or tracking codes to their storefronts. When you shop at a store, that store's own privacy policy covers what it collects.

Where We Operate

Kaniva is a United States company, and our servers are in the United States. If you use Kaniva from outside the United States, your information is transferred to, stored and processed in the United States, and United States law applies to it.

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are used in United States state privacy laws. Because we don't sell or share it, there is nothing to opt out of; you can still ask us to access, correct or delete your information at privacy@kaniva.io.

Children's Privacy

Kaniva is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice on our website. Your continued use of Kaniva after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy or how we handle your data, contact us at:

Email: privacy@kaniva.io