Privacy Policy
Last updated: September 28, 2026
This Privacy Policy explains how Kavinto ("Kavinto", "we", "us") collects, uses and protects personal information when you visit kavinto.com or use the Kavinto research workspace (the "Service"). If you have any question, email [email protected].
1. Information we collect
- Account information: your email address, name (if you provide it) and login credentials. If you sign in with Google, we receive your basic Google profile (name, email address and profile picture). Passwords are stored only in hashed form.
- Purchase information: payments are handled by Lemon Squeezy, our Merchant of Record. We receive your name, email, country, plan, order and subscription status. We never receive or store your full card number.
- Usage information: searches, filters, saved items and features you use in the app, plus technical data such as IP address, browser, device, pages visited and referring page. We use this to run, secure and improve the Service.
- Messages you send us: support requests, newsletter sign-ups, and partner program applications (name, email, channel or community link, and anything you choose to write).
- Referral and campaign information: if you arrive through a partner link, we store the partner code in a cookie for up to 90 days so the partner can be credited if you subscribe. We also keep, in a first-party cookie for up to 90 days, how you first found us: campaign tags (such as utm_source), the referring website and the first page you visited. When you create an account, we save this together with your country (from your IP address, which we do not store) and your Google Analytics cookie ID, so we can see which channels bring customers.
- Survey answers: if you choose to answer the optional "How did you hear about Kavinto?" question, we store your answer with your account.
2. Public YouTube data
Kavinto analyses publicly available information about YouTube channels and videos, such as titles, publish times, view, like and subscriber counts, including data obtained through YouTube API Services. We use it to produce research metrics and estimates. We do not ask you to connect your own YouTube account. If you own a channel and have a question about how it appears in Kavinto, contact us.
By using the Service you also agree to the YouTube Terms of Service. Google's use of data is described in the Google Privacy Policy. If you signed in with Google, you can remove Kavinto's access at any time from your Google Account connections page.
3. How we use information
- to provide the Service, your account and your subscription;
- to process purchases, refunds and partner commissions;
- to send service emails (for example sign-in, receipts and important changes) and, if you subscribed, our newsletter — you can unsubscribe from the newsletter at any time;
- to answer support requests and partner applications;
- to measure and improve the product, and to detect fraud, abuse and security problems;
- to comply with legal obligations.
Where the GDPR or similar laws apply, we rely on: performing our contract with you (account and subscription), our legitimate interests (security, product analytics, answering enquiries), your consent (newsletter and non-essential cookies where required) and legal obligations (tax and accounting records).
4. Service providers we use
We do not sell your personal information. We share it only with providers that help us run the Service, and only as needed:
- Lemon Squeezy — checkout, payments, tax and invoicing (Merchant of Record).
- Cloudflare — content delivery, security and privacy-friendly web analytics.
- Google — Google Analytics (website usage statistics), Google sign-in and YouTube API Services. When you buy a plan, we send Google Analytics the order ID, amount and currency, linked to your Analytics cookie ID — not your name or email.
- Resend — delivery of account and newsletter emails.
We may also disclose information if required by law, to protect our users or the Service, or as part of a merger or sale of the business, in which case this policy will continue to apply to your information.
5. Cookies
We use a small number of cookies and similar technologies:
- Essential: keep you signed in, protect forms and remember basic preferences.
- Referral and campaign: remember a partner code and how you first found us (campaign tags, referring website, first page) for up to 90 days.
- Analytics: Google Analytics and Cloudflare Web Analytics help us understand which pages are useful. We do not use advertising cookies.
You can block or delete cookies in your browser settings; the site will still work, but you may need to sign in again.
6. International transfers
Our providers may process data in countries other than yours, including the United States. Where required, these transfers are protected by the providers' standard contractual clauses or equivalent safeguards.
7. How long we keep data
We keep account data while your account is active. When you ask us to delete your account, we delete or anonymise your personal data within 30 days, except records we must keep for tax, accounting or legal reasons (such as purchase records). Server logs are kept for a limited period for security.
8. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent at any time. To make a request, email [email protected] from the address linked to your account. We will reply within 30 days. You can also complain to your local data protection authority.
9. Security
We use encryption in transit (HTTPS), hashed passwords, access controls and regular backups. No system is perfectly secure, so please use a strong, unique password and tell us promptly if you notice anything suspicious.
10. Children
The Service is not intended for anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes to this policy
We may update this policy as the Service changes. We will update the date above and, for significant changes, notify account holders by email or in the app.
12. Contact
Questions or requests about privacy: [email protected].