Privacy Policy

Each business that uses Kiver decides what its receptionist does and is responsible for the conversations and appointment records belonging to its own customers. Kiver operates the service on that business's behalf and processes information only to deliver the features described below.

From business owners. Your name and email address from sign-in, your business name, category, description, time zone, opening hours and service list, and the connection details you choose to save for Google Calendar, Instagram or WhatsApp.

From customers who message a business. The content of the messages you send and the replies you receive, the account identifier the messaging platform gives us (an Instagram-scoped user ID or a WhatsApp phone number), the name you provide, and the appointment details you agree to — date, time, service and any notes. If the business shares a visit record with you, it may also contain the notes and items it recorded for your visit.

Technical information. Basic request and error logs needed to keep the service running and secure.

We do not ask for or intentionally collect payment card numbers, government identifiers, or special-category information such as health, biometric or religious data. Please do not send such details through chat. If a business records health or treatment notes in a visit record, it does so as the responsible party under its own professional obligations.

When a business connects its Instagram professional account or its WhatsApp number, Kiver receives the messages that customers send to that account so the receptionist can reply. We handle this information — we do not merely pass through access. Specifically:

• We receive incoming messages, the sender's platform identifier and the message timestamp, and store the conversation so the receptionist can follow the thread and the business owner can review it.
• We use the messaging platform's access token only to send the receptionist's reply back to the same conversation. Tokens and app secrets are encrypted before storage and are never shown in a browser.
• We only reply inside the conversation a customer started. We do not send unsolicited or promotional messages, and a business owner can only send an update to customers who messaged within the window the platform allows.
• We do not read your Instagram or WhatsApp profile beyond the account name needed to identify the connected business account, and we never post to your account, follow accounts, or browse your content.
• Disconnecting the account in Kiver, or removing Kiver from your Instagram apps and websites settings, immediately stops any further message handling.

• To answer customer questions and book, reschedule or cancel appointments.
• To check availability and create calendar entries when a business has connected its calendar.
• To send booking confirmations, reminders and visit records by email or messaging.
• To show the business owner their conversations, bookings, earnings and activity log.
• To keep the service secure, diagnose faults and prevent abuse.

Message content is sent to a language model provider to generate the receptionist's reply and to decide which action to take, such as checking open times or creating a booking. Providers process the text only to return that response. Your conversations are not used to train publicly available foundation models. Every action the receptionist takes is recorded in the business owner's activity log so it can be reviewed.

Changes to a business's own settings, and any message a business owner sends out to past customers, require the owner to confirm them. The receptionist cannot make those changes on its own.

We do not sell, rent or trade your information, and we do not use it for advertising or profiling. Your conversations and appointment records are visible only to the business you messaged. We share information with a small number of providers who operate parts of the service on our behalf: our hosting and database provider, the language-model provider that generates replies, the messaging platforms that carry your messages, our email delivery provider, and the calendar provider a business has connected. We also disclose information where the law requires it.

Conversations, appointments and visit records are kept while the business needs them to serve you and to keep an accurate history of your bookings. A business owner can delete a visit record at any time. When a business closes its Kiver account, its business data, conversations, appointments and records are removed. Technical logs are kept for a short period and then discarded.

Information is stored on managed infrastructure with access controls that keep each business's data separate and reachable only by its owner. Messaging tokens, app secrets and calendar credentials are encrypted before they are stored. Links to a visit record use a long, unguessable address and are excluded from search engines.

• Ask for a copy of the information a business holds about you, or ask for it to be corrected.
• Ask for your conversations, appointments and visit records to be deleted.
• Withdraw a connection at any time — see the data deletion page for the exact steps.
• Ask a business to stop messaging you; simply reply asking them to stop.

To make any of these requests, see our data deletion instructions.

Kiver is intended for businesses and their adult customers. We do not knowingly collect information from children. Where a parent or guardian books on a child's behalf, the details provided are treated as the guardian's booking information.

Our providers may process information in countries other than your own. Where that happens, we rely on the safeguards those providers put in place to protect your information to an equivalent standard.

If we make a material change, we will update the date at the top of this page and, where appropriate, notify business owners in the app.

For any privacy question or request, write to privacy@kiver.app. We respond within 30 days. If your request concerns a specific business, tell us which business so we can reach the right owner.