Privacy Policy.

Information we collect

We collect information you provide when you create an account, use KariVast, contact us, or otherwise interact with our website and service. This may include your name, email address, company name, account credentials, and contact information.

When your organization uses KariVast, you may also store business information through the service, including products, product variants, inventory quantities, warehouse and location information, purchase orders, sales orders, stock transfers, suppliers, customers, invoices, bills, payments, journal entries, bank reconciliation records, and financial reports.

Account information

We use account information to create and maintain your KariVast account, authenticate users, provide access to the service, communicate with you, and help protect accounts from unauthorized access.

Passwords are stored in a protected form and are not stored as plain text. You are responsible for keeping your account credentials confidential and for managing access granted to members of your organization.

Accounting and inventory data

Your organization controls the business information entered into KariVast. We process this information to provide the accounting and inventory features you request, including bookkeeping, invoicing, bills, payments, inventory tracking, warehouse management, purchasing, sales, and financial reporting.

We do not sell your business or inventory data. We use it to operate, maintain, secure, and improve the KariVast service.

How we use information

We may use information we collect to:

• Provide, maintain, and improve KariVast.
• Create and manage user accounts and organizations.
• Process subscriptions and provide billing-related functionality.
• Respond to questions, support requests, and other communications.
• Detect, prevent, and investigate fraud, abuse, and unauthorized access.
• Monitor the reliability, performance, and security of the service.
• Send important service, security, or account-related communications.
• Comply with applicable legal and regulatory requirements.

Payments and billing

KariVast uses Lemon Squeezy as the merchant of record for subscription purchases. Lemon Squeezy collects payment, billing, tax, and transaction information to process purchases, renewals, and refunds and meet its legal obligations.

We send your name, email address, selected plan, and account or signup reference to Lemon Squeezy to create your checkout and connect the purchase to your account. We receive customer and subscription identifiers, subscription status, billing dates, and transaction records to manage access and display billing information. This billing integration does not send your accounting ledgers or inventory records to Lemon Squeezy.

KariVast does not store your full payment card details. Payment information is handled by Lemon Squeezy and its payment providers. Lemon Squeezy's own processing is described in its Privacy Policy.

Security and abuse prevention

We use reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction.

KariVast may use security and abuse-prevention services, including Google reCAPTCHA, to help protect account registration and other parts of the service from spam, fraud, and automated abuse. These services may collect technical and usage information according to their own privacy policies.

Cookies and similar technologies

KariVast may use cookies and similar technologies that are necessary to operate the website and service, maintain authentication sessions, remember preferences, protect accounts, and understand how the service is used.

Some third-party services used by KariVast may also use cookies or similar technologies. You can control certain cookies through your browser settings, although disabling necessary cookies may affect the functionality of the service.

Service providers

We may use trusted third-party service providers to help operate KariVast. These providers may process information on our behalf for purposes such as hosting, infrastructure, security, communications, and service operation.

We limit the information provided to service providers to what is reasonably necessary for them to perform their services, subject to their applicable agreements and privacy obligations.

AI-assisted documentation help (Ask Kari)

When authenticated users with an eligible subscription use Ask Kari in the application dashboard, the submitted question, up to six recent conversation turns from that active session, and excerpts from verified product documentation are sent to Google's Gemini API to generate and verify grounded help responses.

Ask Kari is strictly grounded in product documentation. It does not inspect, query, or transmit your organization's financial ledgers, journal entries, inventory balances, customer lists, or proprietary database records to Google or any other AI model.

Conversation messages in Ask Kari exist only in your browser application memory during the active session and are not persisted in a database by KariVast. Transmitted questions and documentation excerpts are processed by Google in accordance with Google Cloud's enterprise terms and API data policies.

Data retention

We retain information for as long as reasonably necessary to provide the service, maintain business and transaction records, resolve disputes, enforce our agreements, prevent abuse, and comply with applicable legal obligations.

When information is no longer needed for these purposes, we may delete it or anonymize it, subject to applicable legal, security, and operational requirements.

Your choices and privacy requests

Depending on where you live and the applicable law, you may have rights regarding your personal information, including the ability to request access, correction, deletion, or information about how your data is processed.

If you have an account, you should also use the available account and organization settings to manage your information and team access where possible.

For privacy-related questions or requests, please contact KariVast. We may need to verify your identity before completing certain requests.

Business data and organization administrators

If you use KariVast through an organization, the organization may control the account and business data associated with that organization. Organization administrators may be able to manage users, permissions, and business data within the service.

If your use of KariVast is provided by an organization, requests concerning organization-controlled business data may need to be directed to your organization administrator.

Children's privacy

KariVast is a business-oriented service and is not intended for children. We do not knowingly collect personal information from children where such collection is prohibited by applicable law.

International processing

Depending on where you and our service providers are located, information may be processed or stored in countries other than the country where you live. Where required, we take appropriate measures for applicable cross-border data transfers.

Changes to this policy

We may update this Privacy Policy as KariVast develops, our practices change, or legal requirements evolve. Material changes will be reflected on this page. We encourage you to review this policy periodically.