1. Introduction

Kawaa ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email verification service.

2. Information we collect

2.1 Account information

When you create an account, we collect:

Email address
Name (optional)
Company name (optional)
Password (encrypted)

2.2 Usage data

We automatically collect:

API usage statistics
Verification history (the addresses you submit and their results, keyed by a one-way hash of the address)
IP addresses for rate limiting and security
Browser and device information
Website analytics: the pages you open on kawaa.com and app.kawaa.com, the page title, time on page, scroll depth, the site that linked you to us and any campaign tags on that link. This runs on our own servers, sets no cookies and is not shared with any advertising or analytics company. On kawaa.com a visit is identified only by a random number your browser discards when you close the tab. The cookie policy lists exactly what is recorded.

2.3 Payment information

Payment processing is handled by Stripe. We do not store credit card numbers. We only receive transaction confirmations and billing addresses from Stripe.

3. How we use your information

We use collected information to:

Provide and maintain our service
Process transactions and send billing notifications
Send service updates and security alerts
Improve our service and develop new features
Prevent fraud and abuse
Comply with legal obligations

4. Data retention

We retain your account information for as long as your account is active. Verification results are encrypted at rest and retained according to your plan's data retention period (7-365 days), then deleted. You may request deletion of your account and associated data at any time.

5. Data security

We implement industry-standard security measures including:

TLS 1.2+ encryption for all data in transit
AES-256 encryption for data at rest
Automated dependency and security scanning on every change
Two-factor authentication option
Rate limiting and abuse prevention

We do not sell your personal information. We may share data with:

Service providers (AWS, Stripe, Cloudflare) necessary for operations
Law enforcement when required by law
Successors in case of merger or acquisition

7. Your rights

You have the right to:

Access your personal data
Correct inaccurate data
Delete your data
Export your data
Withdraw consent
Lodge a complaint with a supervisory authority

8. International transfers

Your data may be processed in the United States where our servers are located. We ensure appropriate safeguards are in place for international transfers.

9. Children's privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.

10. Changes to this policy

We may update this policy periodically. We will notify you of significant changes via email or through our service.

11. Contact us

For privacy-related questions, contact us at: privacy@kawaa.com