Privacy Policy

This Privacy Policy describes how Kontiva (“we”, “us”) processes personal data in connection with Delivercake (the “Service”) and our marketing website.

If you are using the Service through an organization (your employer or another entity), we may process personal data on behalf of that organization.

We may collect the following categories of information:

• Account data: name, email address, authentication identifiers, and profile information you provide.
• Service data: information you or your organization add to the Service (for example team member details and celebration-related information).
• Billing and invoicing data: billing email, billing address, and invoice-related information (where applicable).
• Usage and device data: log data, device/browser information, and approximate location derived from IP address.
• Cookies and similar technologies: see our Cookie Policy.

We use personal data to:

• Provide and operate the Service.
• Authenticate you, keep your account secure, and prevent fraud.
• Provide customer support and respond to requests (including deletion requests).
• Improve the Service, debug issues, and understand product usage.
• Send service-related messages (for example security alerts and administrative emails).

If you choose “Continue with Google”, we request only the following Google OAuth scopes: openid, email, and profile.

We do not request access to your Gmail, Google Drive, or Google Calendar content.

When you sign in with Google, we may receive and process:

• Your Google account email address.
• Your name and basic profile information.
• Your profile picture URL (we may copy and store the image to display it in the Service).
• OAuth tokens (including refresh tokens when available) to keep the connection active for sign-in and account linking. You can disconnect a connected Google account from within the Service.

We use Google user data solely to provide authentication and account features in the Service. We do not sell Google user data and we do not use it for advertising.

Delivercake’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can learn more at Google’s API Services User Data Policy.

You can also revoke the Service’s access from your Google Account settings at any time.

We may share personal data with:

• Service providers: vendors who help us run the Service (for example hosting, analytics, email delivery, and billing providers).
• Your organization: if you use the Service through an organization, certain data may be visible to administrators according to your organization’s settings.
• Legal: where required to comply with law, enforce our agreements, or protect rights and safety.

We do not sell your personal data.

We retain personal data for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the type of data (for example, billing and security records may be kept longer than general usage logs).

We implement technical and organizational measures designed to protect personal data (such as access controls and encryption in transit). No method of transmission or storage is 100% secure, but we work to protect your information.

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing.

To exercise these rights, contact us at info@kontiva.com.

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy on this page and update the “Last updated” date above.