Privacy Policy

1. What data we collect

Account data

When you create a MyKavo account we collect your name, email address, and a password (stored only as a secure hash - we never store your actual password). If you sign in with Google, we receive your name, email, and profile photo from Google instead. You can optionally add a profile photo and enable two-factor authentication, in which case we store your TOTP secret so we can verify your codes. At signup we check that your email address can actually receive mail, so alerts do not silently bounce.

Monitoring data

The core of MyKavo is the data you ask us to collect: the websites and URLs you choose to monitor, and the snapshots we capture of those pages - screenshots, SEO metadata (titles, descriptions, canonical tags), links, scripts, performance timings, and uptime and SSL checks. We scan public pages only, and our scanner respects robots.txt. You may only add websites you own or are authorized to monitor.

WordPress plugin and Shopify app

If you connect a WordPress site with the MyKavo plugin, we receive the site's address and name, the names and version numbers of plugins, themes and WordPress itself when they are updated, switched on or off, and the addresses of pages you choose to monitor. From version 1.1.0 the plugin also sends daily counts of visits from AI crawlers such as GPTBot or ClaudeBot - by crawler name, with the paths they visited, never IP addresses or anything about people. If you install the MyKavo Shopify app, we receive the store's myshopify.com domain, its name and primary domain, an access token that lets us read the store's themes (stored encrypted), and the names of themes when they are published or edited. Neither the plugin nor the app reads or sends anything about your visitors or your customers: no orders, customer records, or personal data from your store. When you uninstall the Shopify app we delete its access token immediately and the store's data within 48 hours, as Shopify requires; your monitoring history stays in your MyKavo account until you delete it.

MyKavo Chrome extension

The extension's SEO check runs entirely in your browser: it reads the page you open it on only when you click the extension, and the page's content, address and title never leave your browser for that check. MyKavo is contacted only when you ask it to be: when you press Protect (the website's address and the page you were on are sent so MyKavo can add it to your account), and when you open the extension on a website you connected (to show its monitoring status) or press Scan now. Connecting stores a token in the extension that can see and scan that one website only - never your password - and you can disconnect it from the extension menu at any time. Unless you switch off "Share anonymous usage counts" in the extension menu, it also sends anonymous counts - that it was installed, opened, checked a page, or that Protect, Scan now or Open MyKavo was pressed - with a random install number and the extension version. These counts never include a web address, a website name or anything from the page, and are not linked to you unless you connect a website, when they help us see whether the extension helped you get set up. The extension does not collect your browsing history.

Billing data

Payments are processed by Dodo Payments, our merchant of record. Your card number goes directly to Dodo Payments and never touches MyKavo servers - we never see or store card details. We keep only the subscription records we need to know which plan your account is on.

How you use MyKavo

To understand how MyKavo is used and to help people who get stuck, we keep a record in our own database of how you use the product: which dashboard pages and app screens you open and when, the days you use the web dashboard, the Android app, the WordPress plugin, the Shopify app, the Chrome extension or an AI assistant connection, your app version, and the type of browser or device you sign in from. It records page and screen names only - never what you type or what is on the page. Only the MyKavo team can see it, it is not shared with anyone, and it is deleted with your account.

Analytics and product emails

We use Google Analytics 4 and Microsoft Clarity on our public marketing pages (not inside the app dashboard) to understand how visitors find and use the site. Clarity records anonymised heatmaps and session replays of those public pages, with typed input masked. When you sign up, your name and email may also be added to a private mailing list so we can send occasional product updates. You can opt out of these emails at any time by contacting support@mykavo.app.

2. Why we collect it

• To provide the service - scanning your pages, comparing them against baselines, and showing you what changed requires storing snapshots and scan history.
• To alert you - we use your email address to send change alerts, scan-failure notices, and other transactional messages about your account.
• To bill you - subscription records let us enforce plan limits and keep your Pro features active.
• To improve the product - aggregate analytics on marketing pages, the usage records described above, and occasional product-update emails help us build the right features.

We do not sell your data. We do not share it with advertising networks. There is no cookie-based ad tracking anywhere on MyKavo.

3. Where your data lives (subprocessors)

MyKavo runs on a small set of infrastructure providers. Each one processes data only so we can deliver the service:

4. Cookies

MyKavo uses essential session cookies to keep you signed in, stores your theme preference in your browser's localStorage, and loads Google Analytics and Microsoft Clarity cookies on public marketing pages only. That is the full list - no advertising cookies, no third-party trackers inside the app. The details are in our Cookie Policy.

5. How long we keep data

Scan history is retained according to your plan: 30 days on Free and 1 year on Pro. Older snapshots and screenshots are cleaned up as they age out of your retention window. Account data is kept for as long as your account exists. If you ask us to delete your account, we delete your account data and monitoring data - just email support@mykavo.app.

6. Your rights

You can, at any time:

• Access the data we hold about you - most of it is already visible in your dashboard.
• Export a copy of your account and monitoring data by requesting it through support.
• Correct your name, email, or profile details from your account settings.
• Delete your account and all associated data by emailing support@mykavo.app.
• Opt out of product-update emails at any time via the same address.

We respond to requests as quickly as we can, normally within a few business days.

7. Security

Reasonable, practical measures protect your data:

• All traffic to and from MyKavo is encrypted with TLS.
• Passwords are stored only as secure hashes, never in plain text.
• Optional two-factor authentication (TOTP) is available on every account.
• Storage credentials are scoped to the minimum access needed - for example, the screenshot store can only touch its own bucket.
• Card numbers never reach our systems; Dodo Payments handles all payment data.

No system is perfectly secure, but if we ever become aware of a breach affecting your data, we will notify you promptly.

8. Children

MyKavo is not intended for anyone under 16. You must be at least 16 years old to create an account. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.

9. Changes to this policy

We may update this policy as the product evolves. When we do, we will update the date at the top of this page, and for meaningful changes we will let you know by email or an in-app notice. Continued use of MyKavo after a change means you accept the updated policy.

10. Governing law and contact

MyKavo is operated by Dakshesh Babu, and this policy is governed by the laws of India. For any privacy question, data request, or concern, email support@mykavo.app. You will hear back from a human.