Privacy policy

Preliminary version. This document will be reviewed by counsel and updated before the first offering.

1. Controller

Kivvia Fintech LTDA, CNPJ 69.734.087/0001-27, Av. Brig. Faria Lima, 1811, conj. 115, São Paulo, SP, Brazil, is the controller of the personal data processed through this website and platform, under the LGPD and, for residents of the European Economic Area, the GDPR. Once incorporated, Kivvia Fintech S.L., Madrid, Spain, will become the controller for residents of the European Economic Area and this policy will be updated. Contact for privacy matters: sac@kivvia.com.

2. Data we collect

• Account data: name, email, phone, country, preferred language, password hash.
• Profile data you submit: producer pre-analysis (company, location, crops, volumes, financing goal), investor or buyer interest, optional documents.
• Consents: acceptance of terms and privacy policy, marketing preference, with timestamps.
• Technical data: IP address, browser, pages visited, needed to run and secure the site.

3. Purposes and legal bases

• Providing the account and the services you request (contract performance).
• Triage of producer pre-analyses and matching of interest (legitimate interest and pre-contractual steps).
• Communications about the launch, when you consent (consent, revocable at any time).
• Legal obligations, including future anti-money-laundering duties once licensed.

4. Where data is stored

Data is stored in the European Union (Supabase, EU region) and processed by service providers under data-processing agreements: hosting (Vercel), email (Resend), media (Cloudinary). Transfers outside the EU rely on standard contractual clauses.

5. Retention

Account data is kept while the account exists and for the periods required by law after closure. Pre-analysis and interest data are kept for up to five years or until you ask for deletion, whichever comes first, unless a legal duty requires longer.

6. Your rights

Access, rectification, deletion, portability, restriction and objection, and the right to withdraw consent. Users in Brazil have the rights set by the LGPD, including confirmation of processing and information about sharing. Write to sac@kivvia.com. You may also complain to the Spanish Data Protection Agency (AEPD) or the Brazilian National Data Protection Authority (ANPD).

7. Cookies

We use strictly necessary cookies (session, language) and, with your consent, analytics cookies. See the cookie notice on the site.

8. Changes

We may update this policy. The date of the last revision is shown on this page.