How Kavim handles data, access, and disclosure. Last updated May 2026.
Kavim collects the minimum data required to operate the platform and deliver structured intelligence outputs to authenticated users.
Access to Kavim is gated by role. Authentication is handled via OAuth with signed session tokens. All protected procedures require a valid session; there is no client-side access gating.
All data in transit is encrypted using TLS 1.2 or higher. Data at rest is encrypted using AES-256. Compliance documents are stored per-user and are not accessible to other users or to Kavim staff outside of support contexts.
Kavim uses a limited set of third-party services. No personal data is shared with advertising networks, data brokers, or analytics platforms beyond what is listed below.
If you identify a security vulnerability in the Kavim platform, please report it to us before public disclosure. We commit to acknowledging reports within 48 hours and to providing a resolution timeline within 7 business days for confirmed vulnerabilities.
Security reports: [email protected]. Please include a description of the vulnerability, steps to reproduce, and any relevant technical details. We do not operate a bug bounty programme at this time.
To request access to, correction of, or deletion of personal data held by Kavim, contact [email protected]. We will respond within 30 days. Users in the European Economic Area have additional rights under GDPR.