Skip to content

Legal

Privacy policy

How Kivvia collects, uses and protects personal data under the GDPR and the LGPD.

Last revised September 6, 2026

Preliminary version. This document will be reviewed by counsel and updated before the first offering.

1. Controller

Kivvia Fintech, Madrid, Spain, with a subsidiary in São Paulo, Brazil. Contact for privacy matters: sac@kivvia.com.

2. Data we collect

  • Account data: name, email, phone, country, preferred language, password hash.
  • Profile data you submit: producer pre-analysis (company, location, crops, volumes, financing goal), investor or buyer interest, optional documents.
  • Consents: acceptance of terms and privacy policy, marketing preference, with timestamps.
  • Technical data: IP address, browser, pages visited, needed to run and secure the site.

3. Purposes and legal bases

  • Providing the account and the services you request (contract performance).
  • Triage of producer pre-analyses and matching of interest (legitimate interest and pre-contractual steps).
  • Communications about the launch, when you consent (consent, revocable at any time).
  • Legal obligations, including future anti-money-laundering duties once licensed.

4. Where data is stored

Data is stored in the European Union (Supabase, EU region) and processed by service providers under data-processing agreements: hosting (Vercel), email (Resend), media (Cloudinary). Transfers outside the EU rely on standard contractual clauses.

5. Retention

Account data is kept while the account exists and for the periods required by law after closure. Pre-analysis and interest data are kept for up to five years or until you ask for deletion, whichever comes first, unless a legal duty requires longer.

6. Your rights

Access, rectification, deletion, portability, restriction and objection, and the right to withdraw consent. Users in Brazil have the rights set by the LGPD, including confirmation of processing and information about sharing. Write to sac@kivvia.com. You may also complain to the Spanish Data Protection Agency (AEPD) or the Brazilian National Data Protection Authority (ANPD).

7. Cookies

We use strictly necessary cookies (session, language) and, with your consent, analytics cookies. See the cookie notice on the site.

8. Changes

We may update this policy. The date of the last revision is shown on this page.