Privacy policy

Kivo, legal form and address to be completed, is the data controller for the data described here. For any question, write to jeanmariebissari@gmail.com.

• Account — phone number, used for one-time password (OTP) sign-in; no password is stored.
• Vendor profile — shop name, shop or product photos, sales zone, availability status published live.
• Location — GPS position explicitly requested from the vendor at sign-up and when updating their status, to locate their sales zone for customers. Never collected without their voluntary action.
• Browsing and usage — visited pages, clicks, technical errors, and session recordings (session replay), via PostHog. Input fields are masked by default.
• Anonymous visitor identifier — a technical identifier stored in the browser (without an account) that lets you follow a vendor from their public page without creating an account.
• Contact form — name, email and message, to answer your request.

• Provide the service (account, public page, status updates) — performance of the contract.
• Display a vendor's position and sales zone — explicit consent of the vendor.
• Measure site usage and fix bugs (analytics, errors, session replay) — legitimate interest, governed by a consent banner for non-essential trackers.
• Answer a request sent through the contact form — legitimate interest.

Kivo uses the following providers, which process data on our behalf:

• PostHog — analytics, session replay and error tracking (hosted in the United States by default; European Union if the project is explicitly configured on eu.i.posthog.com).
• Africa's Talking (or equivalent provider) — sending sign-in codes by SMS.
• WhatsApp / Meta — if you contact us via WhatsApp, your exchange is subject to WhatsApp's privacy policy, independent of Kivo.
• Hosting — application server and database (hosting provider identity and location to be completed).

We do not sell any personal data.

• Account and vendor profile (phone, shop name, photos, sales zone) — for as long as the account is active, then deleted within 12 months of account deletion.
• OTP code — a few minutes, the length of its validity; never kept longer.
• Usage events (visited pages, clicks) — up to 1 year on PostHog's free plan, up to 7 years on a paid plan.
• Session recordings (replay) — up to 30 days on PostHog's free plan, up to 90 days or more depending on the chosen plan.
• Contact form messages — kept while processing the request, then deleted within 24 months.
• Anonymous visitor identifier — stored only in the browser; erasable at any time by clearing the site cache, no retention imposed server-side.

These durations are reasonable defaults and must be confirmed with the PostHog plan actually selected and the database purge policy.

The site uses technical trackers necessary for its operation, as well as audience measurement and session replay trackers (PostHog) subject to your consent, changeable at any time via the cookie management banner.

Depending on the regulations applicable in your country, you have the right to access, rectify, delete and object to your data. To exercise it, write to jeanmariebissari@gmail.com.

This policy may evolve with the service. The last update date is indicated at the top of this page.