Privacy Policy

Last updated 3 September 2026. A plain-English template — if you have customers in the EU or UK, have a lawyer confirm it meets GDPR before launch.

What we collect

• Your email address, when you buy, sign in or request the free module.
• Purchase records — what you bought, when, and the amount. Card details are handled entirely by Stripe and never reach our servers.
• Session data — a cookie that keeps you signed in, plus the browser and approximate time of sign-in.

What we don't do

We don't sell your data, and we don't run advertising trackers on this site.

Cookies

One essential cookie, kv_session, which keeps you signed in. It carries no personal data — only a random token that maps to your session on our server. Removing it signs you out.

Who processes your data

• Stripe — payments and invoicing.
• Resend — transactional and list email.
• Mux — video hosting and delivery.
• Our hosting and database provider — storing accounts and purchases.

How long we keep it

Purchase records are kept as long as tax law requires, typically six to seven years. Marketing emails are kept until you unsubscribe.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email hello@kirovault.com. Note that deleting your account removes your course access, and we may need to keep purchase records for tax purposes.