Privacy Policy

1) Who we are

KavaCore LLC is a software & AI company based in Illinois, USA. We provide website development & design, custom software, AI integrations, BPO/customer support, training, and digital marketing services.

2) Scope & definitions

This Policy covers personal information processed via kavacorellc.com, our contact channels, demos, and service delivery for customers and visitors in the U.S. and Canada.

“Personal information” means information that identifies or can reasonably be linked to an individual (e.g., name, email, IP address). “Subprocessor” means a contracted service provider that processes personal information for us.

3) Data we collect (minimal)

3.1 Information you provide

• Contact & account: name, email, phone, company, role.
• Project materials: goals, requirements, files you upload or share.
• Support & training: tickets, chat/email threads, feedback you submit.

3.2 Information collected automatically

• Security/operations logs: IP address, device/browser headers, timestamps, pages requested, referring page.
• Diagnostics: error events and performance metrics to keep services reliable.

3.3 Optional audio/visual

• Calls/meetings: if you enable recording, we capture audio/voice and store it securely with clear notice (see §8).

We do not seek sensitive categories (e.g., government IDs, health/biometrics, precise geolocation). If a customer requests processing of such data, we require a written agreement and lawful basis before proceeding.

4) How we use data

• Service delivery: respond to inquiries, prepare estimates, fulfill contracts, provide support and training.
• Safety & reliability: detect abuse/fraud, secure systems, maintain availability, and debug issues.
• Legal & compliance: keep records required for tax, accounting, and regulatory purposes.

5) Your requests (DSAR)

You can request access, correction, or deletion of your personal information by emailing Support@kavacorellc.com.

1. Acknowledge: we confirm receipt within 24 hours.
2. Verify: we may request reasonable information to verify your identity.
3. Fulfill: we respond within the legally required timeframe for your jurisdiction.

Authorized agents may submit requests where permitted by law, with proof of authority.

6) Disclosure & subprocessors

We share personal information only with:

• Service providers (hosting, email, support tooling) bound by confidentiality and security obligations;
• Authorities when required by law; or
• At your direction (e.g., integrations you ask us to connect).

We do not sell or share personal information for cross-context advertising. Our core vendors are listed at /legal/subprocessors (updated as we grow).

7) Cookies & analytics

We aim to use only strictly necessary cookies. If we enable analytics or advertising in the future, we will:

• Provide a consent banner with clear choices;
• Offer a “Do Not Sell/Share” option where required;
• Honor supported browser opt-out signals where applicable; and
• Detail vendors and retention in our Cookie Policy.

Cookie categories

• Strictly necessary (security, load balancing, session continuity)
• Performance (optional, to improve speed and reliability)
• Analytics/ads (disabled by default today)

8) Calls, recordings & BPO/AI

Where our BPO or AI calling features are used, we present a concise notice and obtain consent before recording. Because certain U.S. states (e.g., California, Illinois) require all-party consent, we default to announcing recording on every call and provide a non-recorded alternative. For outbound campaigns, we require the appropriate consent and opt-out mechanisms under applicable telemarketing and anti-spam rules.

• Telemarketing & texts (U.S.): consent and opt-out per applicable law; we retain proof of consent for automated/prerecorded outreach.
• Commercial email (U.S.): identification and unsubscribe mechanisms are required.
• Canada: for commercial electronic messages, we obtain consent and include sender identification and unsubscribe (CASL).

9) Security

We apply layered controls: encryption in transit, role-based access, least privilege, environment isolation, backups, and vendor due diligence. While no internet service is 100% secure, we promptly assess and address incidents, and notify as required by law.

10) Retention

We keep personal information only as long as necessary for the purposes described above, to comply with legal obligations, or to resolve disputes. Where feasible, we de-identify or delete data when it is no longer required.

11) International transfers

We process data primarily in the United States and may use providers in the U.S. and Canada. For jurisdictions with cross-border requirements, we use contractual safeguards with subprocessors and assess data flows as needed. See our Data Processing Addendum and Subprocessors list.

12) Children

Our services and website are not directed to children under 13. We do not knowingly collect children’s personal information. If you believe a child provided data, contact us for deletion.

13) Changes to this Policy

We will post updates here and adjust the effective date. Material changes will be highlighted at the top of this page.

14) Contact

Email: Support@kavacorellc.com
Mail: KavaCore LLC, Grover Street, Joliet, IL 60433 (USA)