Privacy Policy

This policy explains how Kovyr collects, uses, and protects information when you use our security-posture monitoring service.

We collect: your account details (email address); the assets you add (such as domain names); the results and findings from scans of your public-facing security posture; and payment information, which is processed by Stripe — we do not store your card number.

We use your information to provide the monitoring service, generate your reports, communicate with you about your account, and process payments.

We share information only with service providers who help us operate — our hosting and database provider (Supabase), our payment processor (Stripe), and our email provider — and only as needed to run the service. We do not sell your data. We may disclose information if required by law.

Access is restricted with database row-level security so that one customer cannot access another customer's data. Data is encrypted in transit, and administrative credentials are kept server-side only.

We keep your data while your account is active and for a reasonable period afterward, then delete or anonymize it. You may request deletion at any time.

You may access or request deletion of your data by contacting us, and you may cancel your subscription at any time.

We may update this policy; changes will be posted here with a new effective date. Questions? Contact kendall12236@gmail.com.