Privacy policy

OneKivo processes verified account contact details, terms acceptance, payment references, access status, activation timestamps, cancellation requests and immutable audit events to provide private directory access and reconcile payments. Activation codes are hashed; plaintext codes are not retained in account history.

We do not collect card credentials, bank passwords, OTPs or TOTP secrets in payment or support forms. Administrators with verified AAL2 and payment privileges can inspect the minimum records needed to reconcile manual payments and refunds. Reviewers do not receive billing access.

Signed-in directory activity is aggregated using a restricted service vocabulary. Unknown free text, user-linked search history and customer identifiers are not retained in these aggregates. Aggregate counts are deleted after 90 days.

Account and transaction records are retained for security, dispute resolution and applicable recordkeeping obligations. Request help or deletion through your OneKivo administrator; records subject to lawful retention cannot be silently erased. Historical operational records remain private.

Applications and third-party transactions happen on the linked provider websites, under their own privacy policies. OneKivo is not a government authority.