Privacy Policy

1. Information We Collect

When you use Koave, we collect the following types of information:

• Account information: Name, email address, location, bio, and profile photo provided during signup and onboarding.
• Listing data: Titles, descriptions, photos, pricing, and category information for services and products you list.
• Transaction data: Order amounts, payment status, milestone progress, and dispute records.
• Communications: Messages exchanged between buyers and sellers on the platform.
• Usage data: Pages visited, features used, and general interaction patterns to improve the platform experience.

2. How We Use Your Data

• To operate and maintain the Koave marketplace.
• To process transactions, milestone payments, and payouts.
• To send transactional emails — purchase confirmations, milestone updates, dispute notifications, and download links.
• To detect and prevent fraud, abuse, and policy violations.
• To improve the platform based on aggregated, anonymized usage patterns.

We do not sell your personal data to third parties. Ever.

3. Payment Data & Stripe

All payment processing is handled by Stripe. Koave does not store credit card numbers, bank account details, or sensitive financial information on our servers. When you connect a Stripe account as a seller or make a purchase as a buyer, your financial data is transmitted directly to and stored by Stripe in accordance with their Privacy Policy.

We store only references (Stripe customer IDs, account IDs, and payment intent IDs) necessary to track transactions and process payouts.

4. Data Storage & Security

Your data is stored securely using industry-standard cloud infrastructure. We employ row-level security policies to ensure users can only access their own data. Uploaded files (avatars, portfolio images, listing photos, digital products) are stored in secure storage buckets with appropriate access controls — public for profile content, private for digital product files.

Authentication is handled through secure, token-based sessions. Passwords are hashed and never stored in plain text.

5. Email Communications

Koave sends emails from noreply@notify.koave.art for:

• Account verification and password resets.
• Welcome emails after onboarding.
• Transaction notifications — milestone updates, dispute alerts, and digital download links.

We do not send marketing or promotional emails without your explicit consent. Transactional emails related to active orders cannot be opted out of, as they contain critical information about your transactions.

6. Cookies & Analytics

Koave uses essential cookies to maintain your authentication session. We do not use third-party advertising trackers. Any analytics we collect is aggregated and anonymized — we don't build individual user profiles for advertising purposes.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate information on your profile.
• Delete your account and associated data, subject to legal retention requirements for completed transactions.
• Export your data in a portable format upon request.
• Withdraw consent for optional data processing at any time.

To exercise any of these rights, contact us at hello@koave.art.

8. Data Retention

We retain your account data for as long as your account is active. Transaction records are retained for 7 years to comply with financial reporting obligations. If you delete your account, we remove your personal data within 30 days, except where legal retention is required.

9. Contact

Privacy questions? Reach us at hello@koave.art or visit our Contact page.