Privacy Policy

1. Introduction

Kawaa ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email verification service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and password (stored securely using industry-standard hashing).

Email Addresses You Verify

We process email addresses you submit for verification. These are used solely to perform the verification and are cached temporarily to improve performance. We do not sell or share the email addresses you verify with third parties.

Usage Data

We collect information about how you use our service, including API requests, verification results, and timestamps for analytics and service improvement.

Tracking Pixel Data

If you use our email tracking features, we collect data when tracking pixels are loaded or tracking links are clicked. This includes anonymized information such as:

• Timestamp of the event
• Anonymized IP address (hashed)
• User agent information
• Geographic region (derived from IP, not stored with precision)

This data is used to provide you with email open and click tracking statistics.

3. How We Use Your Information

• To provide and maintain our email verification service
• To process your transactions and manage your account
• To improve and optimize our service
• To communicate with you about your account or service updates
• To prevent fraud and ensure security

4. Data Retention

Verification results are cached for up to 24 hours to improve performance. Account data is retained for as long as your account is active. You may request deletion of your account and associated data at any time.

5. Activity Data Sharing Program

Kawaa offers an optional Activity Data Sharing Program that allows you to contribute anonymized email engagement data to improve our email deliverability insights for all users.

5.1 Opt-In Consent

Participation in the Activity Data Sharing Program is entirely voluntary and requires your explicit consent. You can opt in through your account settings or via our API. You can withdraw your consent at any time.

5.2 Data We Collect When You Opt In

If you choose to participate, we may collect the following engagement data from your email campaigns:

• Minimal sharing level: Email opens only
• Standard sharing level: Email opens and link clicks
• Full sharing level: Opens, clicks, bounces, complaints, and unsubscribes

You choose your sharing level when you opt in, and you can change it at any time.

5.3 How We Protect Your Data

All email addresses in the Activity Data Sharing Program are anonymized using SHA-256 cryptographic hashing before storage. This means:

• We never store raw email addresses from shared data
• Email hashes cannot be reversed to reveal the original email
• IP addresses are anonymized (hashed and truncated)
• No personally identifiable information (PII) is stored

5.4 How Shared Data Is Used

Anonymized engagement data is used to:

• Calculate email activity scores and deliverability metrics
• Generate domain reputation scores
• Improve email verification accuracy for all Kawaa users
• Identify patterns that indicate email validity or risk

We do not sell shared data to third parties or use it for advertising purposes.

5.5 Data Retention for Shared Data

• Raw engagement events: Retained for 90 days
• Aggregated activity scores: Retained for 2 years
• Domain reputation data: Updated continuously, retained indefinitely

5.6 Your Rights

As a participant in the Activity Data Sharing Program, you have the right to:

• Opt out at any time: Use the API endpoint DELETE /v1/data-sharing/opt-out or contact support
• Export your data: Use GET /v1/data-sharing/export to download all data related to your participation
• Change sharing level: Adjust what types of engagement data you share
• View contribution stats: See how much data you've contributed

Note: Because shared data is anonymized and not linked to your identity, we cannot delete specific email engagement records after they have been contributed. However, opting out stops all future data sharing immediately.

5.7 Benefits of Participation

Participants in the Activity Data Sharing Program may receive:

• Credit rewards based on contribution volume
• Free activity data lookups
• Access to enhanced deliverability insights

6. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest for stored data
• Secure password hashing
• Regular security audits

7. Third-Party Services

We use trusted third-party services to operate our platform:

• Amazon Web Services (AWS) for infrastructure
• Stripe for payment processing

These providers have their own privacy policies governing their handling of your data.

8. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Opt out of marketing communications

9. Data Processing Agreement

For enterprise customers requiring a Data Processing Agreement (DPA) for GDPR compliance, please review our Data Processing Agreement.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@kawaa.com