Privacy Policy

Last Updated: September 27, 2026

This Privacy Policy explains how kvelpo ("we," "our," or "us") collects, uses, and protects your personal information. This policy applies to our service and complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Data Controller

Kvelpo SIA, registered in Latvia at "Melnāji", Suntažu pagasts, Ogres novads, LV-5060, Latvia, operates kvelpo and is the data controller responsible for your personal information. For privacy-related inquiries, please contact us at privacy@kvelpo.com.

2. Information We Collect

2.1 Account Information

Email address and user identifier (via Clerk authentication)
Profile information: full name, profile picture (from your sign-in account), bio, skills, links, and work experience (job titles, organizations, locations, dates, and descriptions you add)
Membership and subscription details
Messages you send us through the support form (your name, email address, topic, and message)

2.2 Project Information

Project names, descriptions, and tags
Role requirements and applications
Project collaboration data

2.3 Safety and Moderation Information

Reports you submit about projects or profiles, and reports other users submit about your projects or profile
Warnings sent to you and whether your account is suspended, with the reason
A record of moderation actions taken on your account or content (what was done, when, by which kvelpo team member, and why)

2.4 Technical Information

IP address and location data (for EU compliance detection)
Device and browser information
Cookies and similar technologies

3. Legal Basis for Processing (GDPR Article 6)

Contract Performance: We process your data to provide the services you've requested.

Legitimate Interests: We process data for platform security, fraud prevention, and service improvement.

Consent: For optional, non-essential cookies where required.

Legal Obligation: To comply with applicable laws and regulations.

4. How We Use Your Information

Provide and maintain our platform services
Process payments and manage subscriptions (via Stripe)
Authenticate users and secure accounts (via Clerk)
Facilitate project collaboration and communication
Send service-related notifications and updates
Analyze usage patterns to improve our services
Keep the platform safe: review reports, moderate content, and enforce our Terms of Service
Comply with legal obligations and protect our rights

5. Data Sharing and Third Parties

We share your data only with the following trusted third parties:

Clerk: Authentication and user management
Stripe: Payment processing and subscription management
Vercel: Hosting and infrastructure services

We do not sell your personal information to third parties for their marketing purposes.

6. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure adequate protection through appropriate safeguards, including Standard Contractual Clauses (SCCs) and compliance with GDPR requirements for international data transfers.

7. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

Account and Profile Data: Retained while your account is active
Project Data: Retained until you delete the project or your account
Messages and Applications: Anonymized (disassociated from your identity) immediately when your account is deleted, rather than deleted outright, so the other party's conversation or application history stays intact
Consent Records: Deleted immediately when your account is deleted
Reports and Moderation Records: Kept while needed to keep the platform safe. When you delete your account, reports about your profile are deleted, and reports you submitted and moderation records are disassociated from your identity
Payment Data: Held by our payment processor, Stripe, as required by financial regulations (typically 7 years); we do not store your card details ourselves

Deleting your account permanently and immediately erases your profile and projects and deletes you from our authentication provider. There is no grace period, and this cannot be undone.

8. Your GDPR Rights

Under the GDPR, you have the following rights:

Right to Access: Request a copy of your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your personal data
Right to Portability: Request transfer of your data
Right to Restrict Processing: Limit how we use your data
Right to Object: Object to certain types of processing

You can exercise these rights through your profile settings or by contacting privacy@kvelpo.com.

9. Cookies and Tracking

We use cookies and similar technologies for:

Authentication and session management
Remembering your preferences and consent choices

We do not currently use analytics, advertising, or tracking cookies. See our Cookie Policy for full details.

You can manage cookie preferences through our consent banner or browser settings.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including: encryption, secure authentication protocols, regular security assessments, and access controls. However, no method of transmission over the internet is 100% secure.

11. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will take immediate steps to delete it.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of our services after such changes constitutes acceptance of the updated policy.

13. Contact Information

For any privacy-related questions or to exercise your GDPR rights, please contact us at:

Company: Kvelpo SIA

Email: privacy@kvelpo.com

Address: "Melnāji", Suntažu pagasts, Ogres novads, LV-5060, Latvia