Privacy Policy

Last updated: 15 July 2026

This policy explains what Kiyunet Technology collects through KiyuOne and the Kiyu family of products, and how we use and protect it.

1. What we collect

• Account data — name, mobile number (OTP-verified), password (stored as a salted hash, never in plain text), and email if you choose to add one.
• Business data — records you create inside the products (for example invoices, contacts, listings). This data belongs to you.
• Technical data — device, browser and log information used for security and to keep the Services running.

2. How we use it

• To operate your account and sign you in across Kiyu apps (single sign-on).
• To send service messages — OTPs by SMS, and transactional updates. Marketing communication is optional and can be opted out of.
• To secure the Services: fraud prevention, abuse detection and audit logs.

3. What we do NOT do

• We do not sell your personal data.
• Platform administrators do not browse your business records; tenant data is isolated per account and used only to provide the Services.

4. Sharing

We share data only with processors needed to run the Services (for example SMS delivery, cloud hosting and payment providers), under contracts that limit their use of it, or when required by law.

5. Retention and your rights

• Account data is kept while your account is active. You may request a copy of your data or deletion of your account via the contact page; some records may be retained where the law requires (for example tax records).
• You can update your name, password and contact details from your KiyuOne account page.

6. Security

Data is encrypted in transit (HTTPS everywhere), passwords are hashed, sessions are httpOnly cookies, and access to production systems is restricted and logged.

7. Contact

Privacy questions or requests: use the contact page and we will respond promptly.