Data ownership
Your catalog, customer, order and balance data belong to you. We process it only to run and support your store, never to sell or to train models.
The Kaviasoft brand never appears to your buyers unless you choose so.
Data export
On request we export your data — catalog, customers, orders, balances and ledger history — in CSV or JSON. With a Kavia Source licence or your own server you also have direct database access.
An export is free once a year and when the contract ends.
Hosting options
- Managed: we host, update and monitor the platform; hosting, SSL and updates are in the plan price.
- Your server: you rent the server, we install and manage it (20% off the monthly fee).
- Self-hosted: with a Kavia Source licence you run it yourself.
Source code
On managed plans the platform code stays with Kaviasoft and you get a licence to use it while the subscription runs. A Kavia Source licence gives you the full source code under a written licence agreement that sets out usage, modification and resale rights.
In custom development projects the code we write for you is transferred to you.
Backups
Database backups run on a schedule: weekly on Start, daily on Pro and Max, with an off-site copy. We test restores before handing a store over.
Access control
- Two-factor authentication (TOTP) for staff accounts.
- Roles and permissions per staff member.
- An audit log of critical admin actions.
- Code stock is stored encrypted; reseller API keys and webhook secrets are stored only as hashes.
- Card numbers never reach the platform: card payments are handled by the payment provider.
Certifications
We do not hold ISO 27001, SOC 2 or PCI DSS certifications and do not claim them. If your business needs a security questionnaire answered, we answer it in writing.
Support model
Start: e-mail support. Pro: priority support. Max: a personal account manager. Support languages: English, Russian and Turkish.
We confirm every request and tell you what happens next; urgent production problems come first.
Reporting a vulnerability
Write to contact@kaviasoft.com with “Security” in the subject. Please give us reasonable time to fix the issue before disclosing it. We confirm receipt and keep you informed. Our contact is also published at /.well-known/security.txt.
Account and data deletion
When a contract ends we first offer a data export. After that we delete your store data from our servers and backups within the backup retention period, except records we are legally required to keep, such as invoices.
Infrastructure we depend on
- Cloudflare: DNS, TLS and protection in front of the sites.
- PostgreSQL and Redis: database and queues.
- Telegram Bot API: Telegram bots.
- TRON network (via TronGrid): USDT deposit detection.
- Your payment providers and suppliers.
An outage at one of them can affect the related feature; we tell you when it happens.
If something goes wrong
If an outage or a security incident affects your store, we inform you by e-mail or Telegram, say what is affected and what we are doing, and send a short summary afterwards.