Privacy Policy

1. What data we collect

Account data

When you create a MyKavo account we collect your name, email address, and a password (stored only as a secure hash - we never store your actual password). If you sign in with Google, we receive your name, email, and profile photo from Google instead. You can optionally add a profile photo and enable two-factor authentication, in which case we store your TOTP secret so we can verify your codes. At signup we check that your email address can actually receive mail, so alerts do not silently bounce.

Monitoring data

The core of MyKavo is the data you ask us to collect: the websites and URLs you choose to monitor, and the snapshots we capture of those pages - screenshots, SEO metadata (titles, descriptions, canonical tags), links, scripts, performance timings, and uptime and SSL checks. We scan public pages only, and our scanner respects robots.txt. You may only add websites you own or are authorized to monitor.

Billing data

Payments are processed by Dodo Payments, our merchant of record. Your card number goes directly to Dodo Payments and never touches MyKavo servers - we never see or store card details. We keep only the subscription records we need to know which plan your account is on.

Analytics and product emails

We use Google Analytics 4 on our public marketing pages (not inside the app dashboard) to understand how visitors find and use the site. When you sign up, your name and email may also be added to a private mailing list so we can send occasional product updates. You can opt out of these emails at any time by contacting support@mykavo.app.

2. Why we collect it

• To provide the service - scanning your pages, comparing them against baselines, and showing you what changed requires storing snapshots and scan history.
• To alert you - we use your email address to send change alerts, scan-failure notices, and other transactional messages about your account.
• To bill you - subscription records let us enforce plan limits and keep your Pro features active.
• To improve the product - aggregate analytics on marketing pages and occasional product-update emails help us build the right features.

We do not sell your data. We do not share it with advertising networks. There is no cookie-based ad tracking anywhere on MyKavo.

3. Where your data lives (subprocessors)

MyKavo runs on a small set of infrastructure providers. Each one processes data only so we can deliver the service:

4. Cookies

MyKavo uses essential session cookies to keep you signed in, stores your theme preference in your browser's localStorage, and loads Google Analytics cookies on public marketing pages only. That is the full list - no advertising cookies, no third-party trackers inside the app. The details are in our Cookie Policy.

5. How long we keep data

Scan history is retained according to your plan: 30 days on Free and 1 year on Pro. Older snapshots and screenshots are cleaned up as they age out of your retention window. Account data is kept for as long as your account exists. If you ask us to delete your account, we delete your account data and monitoring data - just email support@mykavo.app.

6. Your rights

You can, at any time:

• Access the data we hold about you - most of it is already visible in your dashboard.
• Export a copy of your account and monitoring data by requesting it through support.
• Correct your name, email, or profile details from your account settings.
• Delete your account and all associated data by emailing support@mykavo.app.
• Opt out of product-update emails at any time via the same address.

We respond to requests as quickly as we can, normally within a few business days.

7. Security

Reasonable, practical measures protect your data:

• All traffic to and from MyKavo is encrypted with TLS.
• Passwords are stored only as secure hashes, never in plain text.
• Optional two-factor authentication (TOTP) is available on every account.
• Storage credentials are scoped to the minimum access needed - for example, the screenshot store can only touch its own bucket.
• Card numbers never reach our systems; Dodo Payments handles all payment data.

No system is perfectly secure, but if we ever become aware of a breach affecting your data, we will notify you promptly.

8. Children

MyKavo is not intended for anyone under 16. You must be at least 16 years old to create an account. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.

9. Changes to this policy

We may update this policy as the product evolves. When we do, we will update the date at the top of this page, and for meaningful changes we will let you know by email or an in-app notice. Continued use of MyKavo after a change means you accept the updated policy.

10. Governing law and contact

MyKavo is operated by Dakshesh Babu, and this policy is governed by the laws of India. For any privacy question, data request, or concern, email support@mykavo.app. You will hear back from a human.