Privacy.
Last updated: 2026-05-03
What we collect
When you create an account we collect your name, email, password (stored as a salted bcrypt hash — we cannot read your password), and the role you signed up under. If you're an artist, your public profile (headline, statement, portfolio, location, rate, etc.) is published on the marketplace.
When you submit a brief, post a job, send a proposal, or message inside a contract thread, the content you provide is stored and shown to the relevant counterparties (and to Kalaavid administrators for moderation).
For payments, we use Stripe. We do not store card numbers, bank details, or any payment instrument data. Stripe stores those; we receive only their reference IDs.
We log standard request metadata (IP address, user agent, request path) for security, abuse mitigation, and rate limiting. These logs are retained for a maximum of 90 days unless required longer for fraud or legal investigation.
What we use it for
- Operating the marketplace — accounts, profiles, briefs, contracts, payments.
- In-app notifications about contract events, proposals, and messages — delivered to your inbox at
/account/notifications. We may also send transactional emails for account-critical events as the platform grows. - Moderation and dispute resolution.
- Fraud prevention and abuse detection (rate limiting, anomaly detection).
- Aggregate analytics about marketplace activity. We don't sell or share individual data.
What we don't do
- We don't sell your data to advertisers, brokers, or any third party.
- We don't use your messages to train AI models.
- We don't share your email with other users — counterparties see only your name and role until you decide to share more.
Cookies & analytics
We set a single first-party session cookie (kv_session) when you sign in. It's HttpOnly, Secure, and expires after 30 days of inactivity.
We use Google Analytics 4 to understand how the marketplace is used in aggregate — page views, traffic sources, and which features see use. Google Analytics sets its own cookies (_ga, _ga_*) and may collect a truncated form of your IP address. We don't use any advertising trackers, third-party retargeting pixels, or sell analytics data. You can opt out with the Google Analytics opt-out browser add-on.
Your rights
You can edit your profile at /account/profile at any time. You can request deletion of your account by emailing support@kalaavid.com — we'll remove your personal data within 30 days, except records we're legally required to retain (e.g. tax records of completed transactions). If you're in the EU/UK we honour GDPR subject-access requests; in California we honour CCPA requests.
Data location
Our application database is hosted in Canada. Stripe data is processed by Stripe's globally distributed infrastructure (see stripe.com/privacy). By using Kalaavid you consent to your data being processed in these regions.
Changes
When we materially change this policy we'll update the "Last updated" date and, for significant changes affecting active users, send a notice. Continued use after a change means you accept the updated policy.
Contact
Questions: support@kalaavid.com