Legal

Privacy Policy

Last updated: March 2026

1. Introduction

KiwotHire ("we", "our", "us") is operated by KiwotCloud OÜ, Sepapaja tn 6, Tallinn, 15551, Estonia.

Data protection contact: legal@kiwot.io

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Estonian data protection laws. This policy explains how we collect, use, and protect your information when you join our waitlist.

2. What We Collect

When you join our waitlist, we collect:

  • Email address (required)
  • Name (optional)
  • Company name (optional)
  • Timestamp of signup
  • IP address (automatically, for security purposes)

3. How We Use Your Data

We process your data for the following purposes:

  • To send launch notifications and early access invitations. Legal basis: Consent (GDPR Art. 6.1.a).
  • To respond to your inquiries. Legal basis: Legitimate interest (GDPR Art. 6.1.f).
  • To prevent fraud and ensure security. Legal basis: Legitimate interest (GDPR Art. 6.1.f).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage and Security

Your data is stored on Supabase, hosted in the European Union (Frankfurt, Germany). We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, and access controls.

5. Data Retention

We retain your waitlist data until you unsubscribe or request deletion, or until 12 months after the service launches, whichever comes first. After this period, your data will be permanently deleted unless you have created a KiwotHire account.

6. Third-Party Services

We use the following sub-processors to operate this waitlist:

  • Supabase: database and authentication, hosted in the EU (Frankfurt). GDPR-compliant with DPA in place.
  • Vercel: website hosting, EU and US regions. DPA in place.

We do not use analytics or tracking cookies on this waitlist page.

7. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict processing of your data
  • Data portability (receive your data in a structured format)
  • Object to processing based on legitimate interest
  • Withdraw consent at any time (without affecting the lawfulness of prior processing)

To exercise any of these rights, contact us at legal@kiwot.io. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, AKI) at www.aki.ee, or with the supervisory authority in your country of residence.

8. International Transfers

Your data is primarily stored within the EU. If any sub-processor transfers data outside the EU/EEA, such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission.

9. Children's Privacy

Our service is a B2B platform not intended for individuals under 18 years of age. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or posted on this page with a new "Last updated" date.

11. Contact

Data protection inquiries: legal@kiwot.io

General inquiries: help@kiwot.io