Language: EN
Log inStart freeMenu

Privacy policy

Last updated: 

1. Who we are

SIA "Kvedo" (registration number 40203788443, registered address Bāriņu iela 4/6-36, Liepāja, LV-3401) is responsible for the data processed on the website kvedo.com, in the web app app.kvedo.com and in the Kvedo mobile app.

Privacy contacts: info@kvedo.com, +371 27 30 60 77 (Erlens), +371 20 51 05 02 (Rūdolfs).

We have not appointed a data protection officer, as the law does not require one. We answer all questions about data ourselves.

2. When we are the controller and when the processor

We are the controller for data we collect for our own purposes: website visits, the waitlist (open for signups until 3 November 2026), the contact form and chat, accounts, subscriptions, support and our communication with you.

For data a company enters into Kvedo in its work (customers, jobs, work time, materials, invoices, photos, employee location), the controller is the company itself. We process it as a processor on the company's behalf, in accordance with the data processing annex to the terms of use. If you are an employee or a customer of a company and have a question about this data, contact the company first. We will help the company respond.

In this policy we describe both, so that everything that happens with the data is visible.

3. The website kvedo.com

Visits. The website does not use cookies or advertising tracking. For visit statistics we use Plausible (Plausible Insights OÜ, Estonia), which counts anonymous visits on our behalf as a processor: which pages are opened, where the visitor came from, the country, the type of device and which buttons are pressed; it uses no cookies, stores nothing on your device and does not store your IP address. The website is hosted by Vercel, whose server logs briefly receive the visitor's IP address, as happens on any web server. The fonts are our own, not from Google. Basis: our legitimate interests in displaying the website, protecting it and understanding how it is used (Article 6(1)(f) GDPR).

Waitlist. Until 3 November 2026 you could join a waitlist on the website. For each signup we store the e-mail address entered, the date and time of signing up, the page language, a note of which page the signup came from, and a hash of the network address (IP), not the address itself, which we used to stop mass signups. Purpose: only to tell these people that Kvedo has opened. We do nothing else with the address. Basis: your consent (Article 6(1)(a)), which you can withdraw at any time by writing to info@kvedo.com.

Contact form. We store your name, e-mail address, phone number if you provide it, your question, the time of sending, the page language, a note of whether the message was sent from the website or from an account, and a hash of the IP address. A notification of a new message is sent to us by e-mail. Purpose: to answer your question. Basis: our legitimate interests in answering a message you sent yourself (point (f)).

Chat on the website. If you ask a question in the chat, it reaches our server and the AI service provider Anthropic, which prepares the answer. We store the question, the answer, the page language and a random conversation number, to see which questions lack answers. We do not store your IP address; for rate limiting we store only its hash. Do not write passwords, card details or personal identity numbers in the chat. Answers are prepared by a bot, not a human. Basis: our legitimate interests in answering questions about Kvedo (point (f)).

Video tutorials. The videos on the Help page are on YouTube. Until you press play, nothing is loaded from YouTube. When you press it, the video loads from youtube-nocookie.com, and Google, as an independent controller, receives your IP address and may store data in your browser in accordance with its own privacy policy. Basis: your consent, which you give by pressing play (Article 6(1)(a)).

Status page. The Status link opens a separate page, status.kvedo.com, which shows whether Kvedo is working.

4. Account and subscription

Account data. Company name, your name, username, e-mail address, phone number if you provide it, role in the company, language and settings. We store the password only as a hash, so we cannot read it ourselves. If you turn on two-step sign-in, we store its secret key encrypted and the recovery codes as hashes. We also store sign-in keys as hashes, the device name in the list of active sessions and the latest app version you signed in with.

Company data. The details and settings you enter: e-mail, phone, address, registration and VAT number, bank account for invoices, logo, invoice and quote numbering, country, time zone, currency. If you search for a company by name or number, we fill in the details from the Register of Enterprises open data (data.gov.lv).

Users added by a company. If your employer added you to Kvedo, we received your name, username, e-mail, phone and role from them. We also store a record of who added you and when.

Security. For every attempt to create an account, sign in, sign out, change a password or use two-step sign-in, we store the IP address and a note of which account it relates to, to limit password guessing. We store the password reset code together with the IP address of the person requesting it.

Acceptance of terms. When you agree to the terms of use and confirm that you have read this policy, we store the version, time, platform and a hash of the IP address, so that we can prove it.

Subscription and payments. We store the plan, subscription status, Stripe customer number and our invoices to you. Payments are processed by Stripe. When you choose a plan, Stripe receives the company name, address, VAT number and e-mail. You enter card details on the Stripe page; we do not see or store them. If you cancel the subscription, we may ask you to fill in a short survey about the reason; it is not mandatory.

Referral programme. If you recommended Kvedo to another company, we store who recommended it, which company and what discount it gave.

Messages during the trial. During the trial we may send the company administrator a few e-mails and notifications with tips on how to get started. Each e-mail contains a link to unsubscribe from them, and they can be turned off in the app: Profile, Notifications, Tips. They stop after subscribing.

Support. If you e-mail us, call us or send a message in the app, we store the correspondence in order to respond.

Error monitoring. When an error occurs in the app or on the server, Sentry receives technical information: the device, app version, error location and the internal user and company number. We do not send names, e-mails, IP addresses, passwords or entered content.

Our administrators. Our staff access company data only when it is needed for support or security. We record every such action in a log with the reason.

Basis. For the operation of the account, subscription and app: the contract with you or your company (Article 6(1)(b)). For employee accounts created by a company: our and the company's legitimate interests, so that the employee can use the service the company has bought (point (f)). For security, fixing errors, support, the survey and tips during the trial: our legitimate interests (point (f)). For our invoices: legal obligation, accounting regulations (point (c)). Account data are needed to conclude the contract: without an e-mail or username and password the account cannot work.

5. Data a company enters in the app

We process this data as a processor on the company's behalf (see section 2). The app may contain:

  • customers: name or company name, address, e-mail, phone, registration and VAT number;
  • Phone contact (only the one you pick). When adding a client you can tap "From contacts". The phone's own contact picker opens, and the app reads only the one contact you choose: the name or company name, phone number and e-mail address, if the contact has them. They are filled into the new client form and saved only if you save the client. The app does not see, copy or upload your other contacts, and it does not ask for permission to access your whole address book.
  • jobs, projects and equipment: descriptions, addresses, deadlines, checklists, comments, assigned employees and job history;
  • work time: start, end, breaks and trips;
  • materials, stock, purchases and expenses;
  • quotes, invoices, credit notes, acceptance certificates and contract terms, with the details of both parties;
  • signatures: the user's signature for documents and the customer's signature on a certificate, which the customer draws on the phone;
  • photos and videos: photos of the site and videos up to 2 minutes; if it is saved in the photo file, we store the time and place (coordinates) where the photo was taken, and we store the file itself without this metadata;
  • documents and drawings: receipts, delivery notes, invoices, PDF and drawing files that are uploaded;
  • voice: if you use voice input or voice commands, we send the recording for conversion to text and delete it immediately; if you record a voice comment, the recording is stored with the comment so that it can be listened to;
  • imported files: spreadsheets with customers or materials that are uploaded;
  • notifications: the push notification token for the phone and the notification text (for example, the job name and customer).
  • Usage events: a few app events (app opened, PDF opened, invoice shared, help opened, onboarding steps), linked to your user and company, to understand which features are used and improve the app. They are kept only in our own database; we do not pass them to analytics or advertising companies.

What the company's customer sees. When a company sends a quote or invoice, the customer receives an e-mail with a link to a page. If the customer approves or rejects the quote, we store their name, comment, time, browser name and a hash of the IP address, so that it is visible who did it and when. If the company turns on payment reminders, we send them to the customer e-mail given on the invoice, on the company's behalf.

Card payments for invoices (Stripe Connect). If a company turns on card payments, its clients can pay an invoice by card (also with Apple Pay or Google Pay) on a payment page opened from a link in the invoice. The payment is processed by Stripe. The payer enters the card details directly on Stripe's payment page: Kvedo never sees or stores the card number, expiry date or security code. So that the company can accept payments, we create a Stripe account for it and fill it with data we already have (company name, registration and VAT numbers, address, e-mail, phone, IBAN). Stripe verifies the people behind the business (a board member or the self-employed person, documents) itself, as a controller under its own privacy policy. The money goes straight to the company's Stripe account; Kvedo never holds it. So that the invoice marks itself as paid, we keep with the invoice the Stripe account ID and status, the payment ID, amount, date and the payer's name (from Stripe). We keep these records together with the invoice.

Absences, including sick days (health data). If a company turns on "Work time", employees and managers record absences in the app (vacation, sickness, a child's sickness, training and others). A sickness absence and the sick leave certificate number are health data. We process them as a processor on behalf of the company (the employer, the controller), so the company can plan jobs and record working time, and only for the app's functionality: we do not use them for any other purpose and do not pass them to third parties. The app does not ask for a diagnosis, and none should be written in the note. The sickness type and sick sheet number are seen only by the employee and the company's admins and dispatchers; the accountant does not see them, and colleagues see only "Away" with no type, note or place. We keep the records for as long as the company keeps them (an admin or dispatcher can delete them) and delete them when the employee's account or the company is deleted.

Navigation. If you tap in the app to drive to an address, the address is opened in your navigation app (for example, Waze or Google Maps), which processes it in accordance with its own terms.

Each company's data are kept separate from other companies' data. Within a company, each user sees only what their role allows.

6. Location

We use location only in these cases:

  • Trips and addresses. When you start a trip or set your base from your location, we save the trip's starting point or the base point. For address suggestions and trip distance and time, our server sends Google the address or coordinates, without names or invoice data.
  • Location during work (Team map). If a company turns on "Team map", the app sends the phone's last location (coordinates, accuracy, approximate address and, while driving, heading and speed) only while the employee's work timer runs and the app is open (in the foreground). When the app is closed or in the background, or the work has ended, no location is sent. The manager (the company's admins and dispatchers) sees the employee's location during working time, and the employee sees the same in Profile → What your manager sees. We delete the last point when work ends and never keep it longer than 24 hours. For every work action (set off, arrive, start, pause, resume and finish work, photo, client signature, invoice) we keep where it happened and its distance from the job address; admins and dispatchers see this history, employees see their own, and we keep it for 12 months. We keep no continuous route. We process this data as a processor on behalf of the company (the employer, the controller). The location permission can be withdrawn at any time in the phone settings; the rest of the app works without it.
  • Work action history. If the Team map feature is turned on in the company, at the moments of work actions (setting off, arriving, starting, pausing, resuming, finishing a job, adding a photo, signature or invoice) we save the location, accuracy, address and distance to the job address, so that the company can check whether the work was done on site. If an action takes place away from the job site, managers may receive a notification. We do not create a continuous route. We keep it for 12 months.
  • Location and automatic work time. If a worker turns on automatic work time, Kvedo uses the phone's location in the background, also when the app is closed or not in use, only to notice arrival at or leaving a job site of today's plan and to start or stop work time automatically. The phone compares its position with the job sites itself; only the job, the event (arrival or leaving) and the time are sent to Kvedo servers. Coordinates are not sent or stored, and routes are not tracked. The worker's manager sees the work time, the same as if the worker pressed the button. The feature is optional, off by default, and can be turned off at any time in the app or in the phone settings. While the app is open, location may also be used to calculate the trip distance to a job and, if the company has turned it on, for the manager's team map. Location data is not sold or used for advertising.
  • Photos. If the place where a photo was taken is saved in the photo file, we store it with the photo (see section 5).

Where a photo was taken. If a photo or video file contains the capture time and GPS coordinates (EXIF), we read them from the original file before it is compressed and keep them with the photo; if the file has none, the position the app sent when the photo was taken may be kept. This lets the company see where the photo was taken and check the distance to the job site. The stored image file itself no longer carries metadata. The location is seen by the company users who can see that photo, and it is deleted together with the photo, the job or the company account. If you do not want the location kept, turn off location tagging in your phone's camera settings.

We use location in the background only for automatic work time and only if you allow it yourself on your phone. You can see what your manager currently sees about you in the app: Profile, What your manager sees. We process location at work on the employer's behalf, so contact the employer first with any questions.

7. Artificial intelligence

Part of the work in the app is done by artificial intelligence (AI). Every AI result is marked "Created with AI", and a human checks and approves it before it is saved. AI does not make decisions that would have legal effects for you; we do not carry out automated decision-making within the meaning of Article 22 GDPR.

Artificial intelligence (AI) and your permission. Some features use outside AI services: OpenAI turns speech into text, Anthropic (Claude models) does everything else. Each feature sends only what that one action needs, and only when you use it:

  • scanning receipts, delivery notes and invoices (Purchases, Expenses): the photo or PDF of the document and the names and units of the company's materials to match the lines;
  • "Describe the job" (filling in a job from text or voice): your text and the names of the company's clients and workers as spelling hints;
  • voice commands on Home: the text of the spoken sentence; the Kvedo server decides what to do, and nothing happens until you tap the button;
  • choosing a job icon: the job title (without permission the icon is chosen by keywords, without AI);
  • spelling correction (only if you turn it on in Profile): the content of one text field;
  • a quote from chat screenshots: up to 5 screenshots without metadata (they may show the client's name, phone, address and messages) and the names and units of the company's materials (no prices); we do not keep the images unless you choose to keep them with the quote;
  • acceptance act text ("Fill in with AI", "Improve with AI"): the job title, description, checklist, materials with quantities, time on site, photo descriptions and the text you typed or dictated; the company's earlier acts only as a style example;
  • "Shop prices": see the paragraph "AI web search";
  • a message on the client page ("Tidy up text"): the text in the editor, including text pasted from job notes, and the language code (the text may contain the client's name, address or job details); you check the result, tap "Use this text" yourself and publish the message yourself;
  • the survey report (the "Survey" module, only with your AI permission): each survey photo, resized, without metadata and without location (it may show people, car number plates or flat numbers), so the AI can suggest a line of the report, and the short texts of the approved findings for the draft conclusions; a person always checks and approves the AI's suggestion, and Kvedo does not store the flat owners' contacts;
  • in the web version app.kvedo.com: the Kvedo assistant (your question and the company data needed for the answer that your role may see; conversations are kept until unused for 12 months), photo descriptions in a photo export (only if turned on; photos resized, without metadata), column suggestions in a data import (column headers and up to 3 short values per column) and, under Taxes, category suggestions for the outgoing payments of an uploaded bank statement: the AI receives only the payee's name, the payment details and the amount (no IBAN and no personal code), and a suggestion takes effect only after you approve it.

Before the first AI feature is used, the app shows a window that says which data is sent to which providers (OpenAI, Anthropic) and asks for your permission ("Allow" or "Not now"). We store the permission and its time with your user account, and you can change it at any time: Profile → AI help. Without permission the AI features stay off and our server refuses every AI request, so no data is sent to AI providers. The company admin can turn AI features off for the whole company. Anything made by AI is marked "Created with AI" in the app, and you check it before it is saved; the AI itself saves and sends nothing. If an AI result is wrong or inappropriate, you can tap "Report AI result" next to it: the report (the AI result text, your comment if you write one, and your user and company) goes to Kvedo support, and we use it only to improve the AI features and to answer you. AI providers do not use your data to train models.

AI web search ("Shop prices"). If the feature is available to your company and you look up a material's price in Latvian shops, we send Anthropic only the product query: its name, manufacturer or barcode, with no personal data and no company name. Anthropic itself searches public shop pages on the internet and returns the prices and links it found. We keep the result for 24 hours in a shared cache without company data, so the same product is not searched again; your searches (what and when) are kept with the company account so you can see earlier results. To show the nearest shop, the app may use the phone's location: we round it to about 100 m, use it only during the request on our server, never send it to Anthropic and do not store it. The feature works only with the AI permission.

Text and image tasks are performed by Anthropic, speech to text by OpenAI. They do not use the data to train models and keep it for no longer than 30 days for security monitoring. We process company data in AI features as a processor on the company's behalf (see section 2). For the other AI features, the basis is the contract (Article 6(1)(b)), as they are used by choice.

8. Who data are shared with

We do not sell data or share it for advertising purposes. The following service providers process it on our behalf, each only what is needed for its task:

  • Oracle Cloud: server, database, private file storage (photos, videos, PDFs, exports) and encrypted backups. All account and app data. Sweden, Stockholm (EU).
  • Anthropic (AI): every AI feature except speech to text (the list and the data sent are in section 7), including the web search in "Shop prices". Only after the user's AI permission. USA. The data is not used for model training and is kept no longer than 30 days for safety monitoring. The chat on kvedo.com (without an app account) also uses Anthropic, as described in section 3.
  • OpenAI (speech to text only): voice input for a job description, voice commands, dictation into text fields and voice comments. Receives the voice recording (up to 1 minute) and the names of the company's clients and street names as spelling hints. Only after the user's AI permission. USA. The recording is not used for model training and is kept no longer than 30 days for safety monitoring. On our server the voice input recording is deleted right after transcription; only a voice comment keeps its recording with the comment in our private storage (EU) until the comment, job or account is deleted.
  • Google Maps Platform: address suggestions and trip distance and time. Address and coordinates, without names. EU and USA.
  • Stripe: subscription payments and, if the company turns them on, card payments for its clients' invoices (Stripe Connect). Receives the company details, IBAN, invoice number and amount; the payer's card details are processed only by Stripe, we never see them. Ireland (EU), part of the processing in the USA.
  • Resend: e-mail delivery (invoices, quotes and acts to clients, payment reminders, password resets, account and job notifications, contact form messages to us). Receives the recipient's e-mail address, the message content and attachments (such as the invoice PDF) and reports back whether the message was delivered. Sending from the EU (Ireland), logs in the USA.
  • Sentry: error reports from the app and the server. Receives only technical information about the error (device model, operating system, app version, the screen and place in the code where it happened) and the user and company number, without names, e-mails, IP address, screenshots or entered content. We use no performance tracing. Germany (EU, Sentry EU region). Kept up to 90 days.
  • Expo: push notification delivery and app updates. Push token and notification text; for updates, the device IP address and app version. USA.
  • Google Firebase Cloud Messaging and Apple Push Notification service: delivering notifications to the phone. Push token and notification text. EU and USA.
  • OpenStreetMap Foundation: map images in the Team map feature. They are requested by our server, not your phone, so no personal data are shared. United Kingdom.
  • Vercel: hosting of the website kvedo.com. Visitor IP address in server logs. EU and USA.
  • Plausible: anonymous visit statistics for the website kvedo.com, with no cookies and no IP address stored. EU.
  • Supabase: database for the contact form and the waitlist collected until 3 November 2026. Ireland (EU).
  • Cloudflare: domain name (DNS) service only. No data pass through it.
  • Spacemail (Spaceship) and Google Workspace (Gmail): our mailbox info@kvedo.com. Letters and attachments. EU and USA.

If a processor is located outside the European Economic Area, data are transferred under the European Commission's standard contractual clauses or the EU-US Data Privacy Framework, if the processor has joined it. A copy of these documents can be obtained by writing to info@kvedo.com.

We notify company account owners of the addition of a new processor or the replacement of an existing one 30 days in advance by e-mail and in the app. The company may object as described in the data processing annex to the terms of use.

We may also share data with public authorities if the law requires it.

The app stores Google Play and App Store and the website YouTube are operated by Google and Apple as independent controllers in accordance with their own privacy policies.

Connection to artificial intelligence assistants (for example, Claude). If the user connects their own Kvedo account to their own AI assistant, Kvedo, on the user's instruction, passes to that assistant the data the user asks for (jobs, clients, sites, the schedule and, if the user's role allows it, invoices). The assistant can also create or edit jobs, clients and notes, each time with the user's approval. The connection is made with the user's own sign-in and permissions; it can be disconnected at any time in the Kvedo settings (Profile → Password and security → Connections), and it is also disconnected when the password is changed. The assistant's provider is responsible for processing the data on the assistant's side under the user's agreement with it.

9. How long we keep data

  • waitlist: until the message that Kvedo has opened is sent, and then we delete it;
  • contact form messages and correspondence with support: 24 months;
  • chat questions and answers: 90 days; IP address hash for rate limiting: 24 hours;
  • IP address and its hash for limiting sign-in attempts and forms: 24 hours; IP address hash with a waitlist entry, contact form message, quote approval and acceptance of terms: as long as the entry itself;
  • password reset codes together with the IP address: 24 hours;
  • sign-in keys (sessions): 7 days after they expire;
  • account and company data, app data and acceptance of terms: as long as the account exists;
  • two-step sign-in key and codes: until it is turned off;
  • invoices we issue: 5 years, as required by accounting regulations; invoices a company issues to customers: 5 years, also after the account is deleted, as set out in the terms of use, and they can be downloaded before deletion (Company, Data export);
  • subscription cancellation survey: 24 months, after that only totals without text;
  • AI assistant conversations: 12 months after the last message;
  • unsent voice comment: 72 hours; voice recordings for speech to text: not stored;
  • Team map latest point: until work ends, no longer than 24 hours;
  • work action history with location and automatic work time events: 12 months;
  • data export files: until the link expires;
  • error reports (Sentry): up to 90 days;
  • server access logs with IP addresses: 14 days;
  • backups: database 90 days, files 30 days; deleted data disappear from backups no later than within this time, and until then we do not use them;
  • absences, including sick days and the sick leave certificate number: as long as the company keeps them; deleted when the employee's account or the company is deleted;
  • where a photo was taken (EXIF GPS): together with the photo;
  • card payment records (payment ID, amount, date, payer's name): together with the invoice;
  • "Shop prices" results: 24 hours in a shared cache; the company's searches while the account exists;
  • the AI permission: while the user account exists;
  • reports about an AI result and other support requests: 24 months;
  • on the side of AI service providers: no longer than 30 days.

10. How we protect data

All connections are encrypted (HTTPS/TLS). We store passwords only as hashes, and there is two-step sign-in, short-lived sign-in keys, a list of active sessions with the option to sign out of other devices, and limiting of sign-in attempts. Each company's data are kept separate in every request, and this is checked by automated tests. Files are stored in private storage and are opened only with a link that is valid for a limited time. Backups are encrypted, and restoring them has been tested. If a security incident affects data for which we are the controller and may pose a risk to your rights, we will notify the Data State Inspectorate (Datu valsts inspekcija) within 72 hours of becoming aware of it, and, if the risk is high, also you without delay. If an incident affects data we process on a company's behalf, we will notify the company without delay.

11. Your rights

You have the right to:

  • find out what data of yours we have and receive a copy of it;
  • correct incorrect data;
  • ask for data to be deleted;
  • ask for processing to be restricted;
  • receive your data in a portable format: the app has a full export of company data (Company, Data export);
  • opt out of e-mails with tips during the trial (link in every e-mail or in the app: Profile, Notifications, Tips);
  • withdraw consent at any time; this does not affect processing before the withdrawal.

Account deletion. You can delete your account directly in the app: Profile → Delete account (confirmed with your password), or on the web: https://app.kvedo.com/konta-dzesana. You can also write to info@kvedo.com. When an employee's account is deleted, we permanently delete all their personal data: name, e-mail, phone, login, signature, location history, automatic work time records, absences (including sick days), voice comments and the AI permission; in the act signing record their IP address and GPS point are anonymised. Only what accounting law requires the company to keep remains: issued invoices and acceptance acts, which the company keeps for 5 years. If you are the company's only admin, deleting your account deletes the whole company and all its data, except the same legally required records.

Right to object. You may at any time object to processing based on our legitimate interests (sections 3, 4 and 13). We will then stop the processing, unless we have compelling legitimate grounds that override your interests, or the data are needed for the establishment or defence of legal claims. You can always object to the use of data for direct marketing, and we then stop it without conditions.

Write to info@kvedo.com. We will respond within one month; in complex cases we may extend this period by a further two months, informing you of this. Before responding we may ask you to confirm that the data are yours. If the question concerns data we process on a company's behalf, we will pass it on to the company and help it respond.

If you believe we are acting incorrectly, you may lodge a complaint with the Data State Inspectorate (Datu valsts inspekcija): Elijas iela 17, Rīga, LV-1050, pasts@dvi.gov.lv, +371 67223131.

12. Cookies and data on your device

The website kvedo.com itself does not use cookies. Data are stored on your device only in these cases:

  • the chat keeps the conversation in the browser session (sessionStorage) until the tab is closed, so that it is not lost when you go to another page;
  • after sign-in, the account pages and app.kvedo.com store one sign-in key in the browser so that you do not have to sign in every time; if Remember me is not ticked, only until the tab is closed. When you sign out, the key is deleted;
  • the mobile app stores on the phone the sign-in key in secure storage, settings and data for working without signal;
  • if you press play on a video tutorial, YouTube may store data in your browser (see section 3).

The first three are needed for the service you use yourself to work, so consent is not required for them.

13. Company contacts we use to communicate about Kvedo

We write to Latvian construction and utility network companies to tell them about Kvedo and find out whether it would be useful to them.

We have not bought the contact information. It is taken from public registers and information published by the company itself:

  • the register of construction merchants and the register of construction specialists of the Construction Information System (BIS);
  • the Register of Enterprises open data;
  • company annual reports;
  • the company's own website.

We also write to building management companies and accounting firms to learn how they work and ask for their opinion of Kvedo. We take the building managers' contacts from the BIS Register of Residential House Managers, the accounting firms' contacts from their own websites, and the list of companies from the State Revenue Service (VID) open data.

For each company we store the name, registration number, published e-mail address, website address and publicly available information about its field of activity and number of employees. If the published address is a specific employee's named address on the company domain, it is personal data, and this section applies to it.

The legal basis is our legitimate interests (Article 6(1)(f) GDPR): offering our product to companies that may need it given their field of activity. We have assessed that such communication does not infringe the recipient's rights: it is sent to a work address, about a work matter, and can be stopped at any time with one word.

We send no more than four letters to any one company. If you reply "no" or otherwise indicate that you are not interested, we stop and do not write again.

We send letters from info@kvedo.com. The mailbox is provided by Spacemail (Spaceship), and we handle the correspondence in a Google (Gmail) mailbox, so these service providers process the content of the letters on our behalf. We keep the contact list in our own database.

We keep the data as long as they are needed for this communication, and no longer than 24 months after the last letter. If you have opted out, we keep only the address on a list of those we no longer write to, for as long as we send such letters, so that we do not accidentally write again.

To object to processing or ask for your data to be deleted, write to info@kvedo.com.

14. Children

Kvedo is intended for companies and their employees. It is not intended for persons under 16 years of age, and we do not knowingly collect their data.

15. Changes

If the policy changes, we will change the date at the top of the page. We will also notify you of significant changes in the app or by e-mail before they take effect.