We collect information you provide directly to us when you create an account or use KovaPay:
Card payment data is processed exclusively by Stripe. KovaPay never stores raw card numbers on our servers. Stripe is PCI DSS Level 1 certified. Please review Stripe's Privacy Policy for details on how they handle payment data.
We do not sell your personal information. We may share information with:
We retain your information for as long as your account is active and as required by law. Transaction records are retained for a minimum of 5 years for tax and compliance purposes. You may request deletion of your account and associated data at any time, subject to legal retention requirements.
We use industry-standard security measures including encryption in transit (TLS), secure cloud infrastructure, and access controls. However, no system is completely secure. Please use a strong password and enable PIN or biometric protection in the app.
You have the right to access, correct, or delete your personal information. To exercise these rights, contact us at support@getkovapay.com. Washington State residents have additional rights under the Washington My Health MY Data Act.
KovaPay is not intended for users under 18. We do not knowingly collect information from minors. If we become aware that a minor has created an account, we will terminate it and delete associated data.
We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification. Continued use of KovaPay after changes constitutes acceptance.
For privacy questions or requests, contact us at support@getkovapay.com.