Kutavio

Kutavio / Legal

Privacy Policy

How Kutavio handles information across the website, admin workspace, mobile app, connected services, and support operations.

Effective
October 5, 2026
Last updated
October 5, 2026

1. Who we are

Kutavio is operated by G FIVE TECH CORP. In this policy, “Kutavio,” “we,” “us,” and “our” refer to G FIVE TECH CORP.
Kutavio determines how personal information is processed for its own account, subscription, security, and support activities. When a business enters information about its customers, employees, or suppliers, that business determines the purposes of processing; Kutavio processes the information to provide the service and carry out the business’s instructions.
Privacy questions and rights requests: support@kutavio.com.

2. Information we process

The information depends on the features you choose. It may include:
  • Account information such as name, email address, verification and security records, memberships, roles, and permissions.
  • Business information such as business and brand name, domain, logo, contact information, and configuration.
  • Customer and work records such as contact points, service addresses, notes, appointments, work orders, equipment, and maintenance.
  • Sales and financial records such as estimates, invoices, line items, taxes, payment and refund status, supplier bills, expenses, inventory, and accounting matches.
  • Employee and contractor inputs such as hours, expenses, receipts, reimbursements, and payroll preparation. Connected payroll services calculate payroll results.
  • Communications such as email, SMS, support messages, attachments, delivery information and, when expressly enabled, call audio or transcripts.
  • Connected-service identifiers, sync status, and encrypted OAuth tokens for services you enable, including QuickBooks, Google, Microsoft, Zoho, Stripe, and Twilio.
  • Web, mobile, device, session, request, error, audit, cookie, and security information.
  • AI inputs and outputs, including text, images, audio, documents, generated drafts, and user corrections when you use an AI-assisted feature.

3. Payment cards and bank credentials

Payment card information is handled through the payment provider’s secure interface. Kutavio does not intend to store full card numbers or CVCs. When bank data is available through a connected accounting system such as QuickBooks, bank login credentials are not provided to Kutavio.

4. Why we use information

  • Create accounts, verify identity, enforce roles, and protect the service.
  • Provide selected Kutavio features and synchronize approved records across devices and connected systems.
  • Transfer invoices, work records, and inputs you approve, and display supported results returned by connected systems.
  • Manage subscriptions, payments, usage rights, support, authorized assisted access, security incidents, errors, and legal obligations.
  • Send product or marketing communications within your choices and applicable rules, and measure or improve the service with appropriate choices for non-essential analytics.

5. Service providers and connected systems

We do not sell personal information. We share only what is needed to provide a selected feature or meet a lawful obligation.
  • Cloud hosting, database, cache, backup, storage, security, and error-monitoring providers.
  • Payment, subscription, email, calendar, SMS, telephone, notification, accounting, advertising, SEO, AI, and transcription providers.
  • Professional advisers and public authorities with lawful authority.
  • Current or planned providers may include DigitalOcean, Stripe, Intuit QuickBooks, Google, Microsoft, Zoho, Twilio, OpenAI or Gemini, and Sentry. A provider receives data only when the related feature is enabled.

6. AI-assisted features

AI may help prepare text, images, classifications, voice commands, or document drafts. These outputs are assistive drafts. Accounting, tax, invoice, payment, payroll, or customer-communication outputs that require approval are not treated as final facts automatically. We minimize the information sent to an AI provider for the selected task.

7. Cross-border processing

Kutavio is operated from Canada. Providers may process information in Canada, the United States, or other countries, where it may be subject to local law and lawful authority requests. We use provider review, contracts, access controls, and encryption to maintain appropriate protection.

8. Retention

  • Active account and workspace data is kept while the service is used.
  • Invoice, payment, tax, accounting, contract, security, and dispute records may be kept for the applicable legal period, commonly up to seven years or longer when law requires.
  • Short-lived export links and temporary processing data expire within hours or days. Operations, error, and analytics logs are generally retained for 14–90 days; necessary security and audit evidence may be kept longer.
  • Personal account deletion has a 7-day cancellation period. Business workspace closure has a 30-day cancellation period.
  • After active-system deletion or anonymization, data is made unavailable through the backup cycle within 35 days unless a legal hold or mandatory retention duty applies.

9. Security

We use access controls, tenant isolation, encryption, secret management, auditing, secure development practices, backups, and incident monitoring appropriate to the information. No internet system can guarantee absolute security. We will meet applicable breach notification and record-keeping duties.

10. Your rights and choices

Depending on applicable law, you may request access, correction, consent withdrawal, an export, account closure, or deletion. We may verify your identity and authority. A request about data controlled by a Kutavio business customer may first need to be directed to that business.
  • Use the unsubscribe method in a marketing email or SMS. Necessary service and security messages may continue for an active account.
  • Review the account deletion process for personal account and business workspace closure.

11. Deletion and retained records

A deletion request does not destroy financial records that must be kept by law or records a third party retains under its own lawful basis. Access to retained records is restricted and they are used only for the required purpose. Connected third-party accounts remain under the provider’s own process; Kutavio removes its connection and access tokens.

12. Children

Kutavio is designed for businesses and is not offered directly to anyone under 18. A business that enters employee or customer data is responsible for the necessary authority and notices.

13. Changes and contact

We may update this policy when the product or law changes. We will provide appropriate notice before a material change takes effect and seek renewed consent where required. Contact support@kutavio.com for privacy questions, access or correction requests, or complaints.