Privacy Policy

1. Who we are

Kindwo (kindwo.com) is a platform for collecting, moderating, and embedding professional testimonials. It is operated by Fares Hentati, an independent developer. Questions about this policy can be sent to support@kindwo.com.

2. Data we collect

Account data

When you create an account we store your full name, email address, username, and a bcrypt hash of your password. We never store your password in plain text.

Testimonial data

When someone submits a testimonial through your public form, we store their full name, email address, company name, testimonial text, and star rating. This data is stored on your behalf and linked to your account.

Usage data

We use Vercel Analytics, a privacy-friendly analytics service that does not use cookies and does not track individuals. It collects aggregated, anonymised data such as page views and geographic region derived from your IP address. Your IP is never stored.

3. How we use your data

• To create and authenticate your account
• To display and manage testimonials in your dashboard
• To send transactional emails: new testimonial notifications, submitter confirmations, welcome emails, password resets, and email change alerts
• To generate and validate API keys and widget keys
• To understand how the product is being used in aggregate

We do not sell your data, use it for advertising, or share it with third parties except as described in section 5.

4. Cookies

Kindwo sets one cookie: a session cookie used solely to keep you logged in. It is an httpOnly cookie, meaning it is not accessible to JavaScript. It expires after 24 hours.

This cookie is strictly necessary for the service to function and does not require your consent under the ePrivacy Directive or GDPR. We set no tracking, analytics, or advertising cookies.

5. Third-party services

We use the following sub-processors to operate the service:

• Vercel — hosting and edge network. Your data passes through Vercel's infrastructure. Vercel Privacy Policy
• Supabase — managed PostgreSQL database hosted in the EU. Your data is stored on Supabase servers. Supabase Privacy Policy
• Resend — transactional email delivery. Your email address is shared with Resend only when sending you an email. Resend Privacy Policy

6. Data retention

Your account data and testimonials are retained for as long as your account is active. You can permanently delete your account and all associated data at any time from your dashboard settings. Deletion is immediate and irreversible.

Testimonial submitters may request deletion of their submitted data by contacting support@kindwo.com.

7. Your rights

If you are in the European Economic Area or the UK, you have the following rights under GDPR:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data
• Portability — receive your data in a portable format
• Objection — object to processing in certain circumstances

To exercise any of these rights, email support@kindwo.com. We will respond within 30 days.

8. Changes to this policy

We may update this policy as the service evolves. We will notify registered users by email of any material changes. Continued use of Kindwo after changes are posted constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions or requests, contact us at support@kindwo.com.