Kyvora← Back to home

Privacy Policy

Last updated: August 5, 2026

1. Introduction

Kyvora Technologies LLC (“Company,” “we,” “us,” or “our”) operates an AI-powered recruiting coordination platform (“Platform”). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Platform, including as an organizational customer (“Customer”) or as a candidate whose information is processed by a Customer through our Platform (“Candidate”).

By using the Platform, you agree to the collection and use of information in accordance with this Policy.

For Candidates, Kyvora generally acts as a service provider or processor on behalf of the recruiting organization or staffing agency that initiated the outreach. That organization is primarily responsible for determining why and how Candidate personal information is processed.

2. Information We Collect

2.1 Information Customers Provide

  • Account registration information (name, email address, organization name)
  • Billing information (processed by our payment provider; we do not store card numbers)
  • Candidate contact data uploaded by Customers (name, phone number, email, professional details)
  • Job descriptions and screening question content
  • AI coordinator configuration and settings

2.2 Information Generated Through Platform Use

  • SMS and email conversation transcripts between Candidates and AI coordinators
  • AI-generated candidate scores, summaries, and assessments
  • Platform usage logs, audit trails, and activity records
  • Device and browser information (IP address, user agent)

2.3 Candidate Information

Candidates interact with the Platform through SMS or email outreach initiated by Customers. Candidates' responses to screening questions are captured and processed. Candidates who wish to exercise their rights (access, deletion, opt-out) may contact us at privacy@kyvoratech.com. Candidates may always opt out by replying STOP to any SMS message.

3. How We Use Information

  • Providing and improving the Platform and its features
  • Processing candidate screening conversations on behalf of Customers
  • Generating AI-powered candidate scores and summaries
  • Sending transactional notifications (e.g., candidate qualified, screening complete)
  • Enforcing compliance with TCPA, CAN-SPAM, and applicable telecommunications regulations
  • Detecting and preventing fraud, abuse, and security incidents
  • Maintaining audit logs for legal and compliance purposes
  • Billing and credit management

We do not sell personal information to third parties. We do not use Candidate data for our own advertising or marketing purposes.

4. Data Sharing and Third Parties

We share data only as follows:

  • Twilio Inc.: SMS delivery provider. Candidate phone numbers and message content are transmitted to Twilio to send and receive SMS messages. Twilio's privacy policy governs their handling of that data.
  • Anthropic PBC: AI model provider. Conversation transcripts, Candidate responses, job context, and related screening information may be transmitted to Anthropic's Claude API to generate AI-assisted messages, summaries, and candidate scores. Anthropic processes this information under applicable contractual and technical safeguards. We do not permit our AI providers to use Customer or Candidate data to train public models where our agreements or provider settings allow us to restrict such use.
  • Resend: Email delivery provider. Candidate email addresses and message content are transmitted to Resend for email delivery.
  • Supabase: Database and infrastructure provider. All Platform data is stored within Supabase's infrastructure, subject to their data processing terms.
  • Stripe: Payment processor. Billing information and subscription data are transmitted to Stripe to process payments; Kyvora does not store card numbers.
  • Legal Requirements: We may disclose information when required by law, court order, or governmental authority.

5. Data Retention

We will process account data deletion within 90 days of a verified account closure request submitted to support@kyvoratech.com. Candidate conversation data is deleted upon a Customer's written deletion request unless retention is required by law or for compliance purposes. Audit logs are retained for 7 years for legal and compliance purposes. Opt-out records (STOP history, suppression list) are retained indefinitely to honor opt-outs. Customers may request deletion of other data by contacting support@kyvoratech.com.

We may retain information longer where required by law, necessary to maintain suppression lists, resolve disputes, enforce agreements, prevent fraud or abuse, comply with legal obligations, or maintain security and audit records.

6. Your Rights

Depending on your location, you may have rights under applicable privacy laws (CCPA, GDPR, state privacy statutes) including:

  • Right to access your personal information
  • Right to correct inaccurate information
  • Right to request deletion of your information
  • Right to opt out of sale (we do not sell data)
  • Right to opt out of SMS communications (reply STOP at any time)

To exercise these rights, contact us at privacy@kyvoratech.com.

Because Kyvora often processes Candidate information on behalf of a Customer, we may need to refer certain requests to the recruiting organization that controls the relevant Candidate data. We will assist Customers with responding to privacy requests as required by applicable law.

7. Security

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit (TLS 1.2+), encryption at rest, row-level security database policies, audit logging of all data access, and regular security reviews. However, no system is 100% secure. In the event of a data breach, we will notify affected Customers in accordance with applicable law.

8. International Data Transfers

Kyvora is based in the United States, and information we process may be transferred to, stored in, or accessed from the United States and other countries where our service providers operate. These countries may have privacy laws that differ from those in your location. Where required, we use appropriate safeguards for international transfers of personal information.

9. Legal Bases for Processing

Where GDPR, UK GDPR, or similar laws apply, our legal bases for processing personal information may include performance of a contract, legitimate interests, consent, compliance with legal obligations, and assisting our Customers in processing Candidate information as directed by them.

10. Business Transfers

If Kyvora is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, personal information may be disclosed or transferred as part of that transaction, subject to appropriate confidentiality and legal protections.

11. Subprocessors

Kyvora uses third-party service providers to help operate the Platform. These providers may process personal information only as necessary to provide services to Kyvora and are subject to contractual obligations designed to protect personal information. A current list of key providers is described in the “Data Sharing and Third Parties” section.

12. Age Restrictions

The Platform is intended for use by individuals who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If you are under 18, do not use the Platform. If we learn we have collected information from a person under 18, we will delete it promptly. If you believe we have inadvertently collected such information, contact us at privacy@kyvoratech.com.

13. California Privacy Rights (CCPA)

California residents have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
  • Right to Opt Out of Sale: We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA rights.

SMS Data: Kyvora does not share mobile phone numbers, SMS opt-in data, or messaging consent records with any third parties for marketing or advertising purposes. SMS opt-in data is used solely to deliver the recruiting screening messages initiated by our Customers.

To exercise your CCPA rights, contact us at privacy@kyvoratech.com. We will respond within 45 days.

14. Do Not Track

Our Platform does not respond to browser Do Not Track (DNT) signals because we do not use tracking cookies or cross-site behavioral tracking. The only cookies we use are strictly necessary authentication cookies (see our Cookie Policy).

15. Contact

For privacy-related inquiries: privacy@kyvoratech.com
For general support: support@kyvoratech.com

Kyvora Technologies LLC
San Francisco, CA 94114
United States