1. Self-service controls
Account → Security provides website-session review/revocation, account-wide sign-out, identity methods, data-export request, and account-deletion entry. A Mac can sign out locally. Billing cancellation, invoices, address, tax ID, and payment method use a short-lived Stripe Customer Portal session.
2. Privacy requests
Depending on law, you can request access, correction, deletion, portability, restriction, objection, withdrawal of consent, opt-out, or appeal. Send a request from the account email to support@kiweely.com and name the right and country/ state. Do not send identity documents until we provide a secure, necessary method.
We verify through fresh account authentication or proportionate information. Authorized agents must show authority and may still require direct identity confirmation. We respond within the applicable period and explain extension, denial, exemption, or appeal. We do not discriminate for exercising a right, though deletion can make the Service unavailable.
3. Export
The export is designed to include your account/contact profile, identity-method summary, subscription/invoice projection, website sessions, installation authorization history, audit events tied to your account, and support requests, subject to third-party secrets, other people’s data, security limitations, and legal exemptions. It does not export full card data because Kiweely never possesses it.
4. Account deletion
Deletion requires fresh authentication. Active billing is canceled, sessions/native refresh credentials are revoked, the product entitlement is suspended, and account data enters the deletion workflow. Already issued offline leases remain valid only until signed expiry.
We retain the minimum records required for tax/accounting, refunds/disputes, fraud/security, legal claims, and permanent one-trial enforcement; retained trial signals are pseudonymized/ HMAC-derived rather than a reusable payment credential. Backups age out on their normal cycle. Stripe and the configured identity provider may retain independent legally required records under their notices.
5. Questions and complaints
Contact us first so we can address the issue. You may also complain to the privacy regulator with authority where you live or work. The Privacy Notice explains data, purposes, transfers, and retention in more detail.