Kawaa is built to support GDPR obligations with privacy controls, DPA coverage, and data subject request workflows.
Our GDPR commitments
- Data minimization - We only collect what's necessary
- Purpose limitation - Data used only for verification
- Storage limitation - Data retained only as long as needed
- Data subject rights - Full support for access, deletion, portability
Lawful basis
Email verification processing is based on:
- Legitimate interest (list hygiene)
- Contract performance (service delivery)
Data processing agreement
Our Data Processing Agreement (DPA) is part of our Terms of Service and applies automatically whenever we process personal data for you, so there is nothing to sign. If you need a copy countersigned by Kawaa, email privacy@kawaa.com.
Your rights
You and your contacts can:
- Request access to stored data
- Request data deletion
- Export data in standard formats
- Object to processing
Contact privacy@kawaa.com for GDPR requests.