Kavo Car
Privacy Policy
KAVO CAR LTDA, enrolled in Brazil's CNPJ under no. 68.967.106/0001-00, with registered office at Avenida Brigadeiro Faria Lima, 2369, suite 1102, Jardim Paulistano, postal code 01452-922, São Paulo/SP, Brazil, operates Kavo Car and acts as controller of personal data processed for its own purposes. This Policy explains that processing in the Marketplace, registrations, the dealer workspace and the authorized WhatsApp integration.
Version 2026-09-05
1. Who this applies to
This Policy applies to people who visit Kavo, create an account, advertise, search for vehicles, contact us, represent a dealer, or use the dealer workspace. Processing follows applicable law, including Brazil's General Data Protection Law (LGPD) where applicable.
2. Data we may process
We may process registration and contact data, professional and organization information, data needed for contracting, listing data and messages, technical access and security records, and information sent to support. Vehicle data and media become public only when their responsible party selects them for publication.
3. Purposes and legal bases
We use data to create and protect accounts, operate the platform, display authorized listings, enable support and negotiations, perform contracts, prevent fraud, meet legal duties, and improve the experience. Processing relies on an appropriate legal basis, such as contract performance, legal obligation, legitimate interest, or consent when needed.
4. Roles in the dealer workspace
When a dealer uses the workspace to manage its own customers, suppliers, and operation, it determines the purposes for that processing and must ensure an appropriate legal basis and notices. Kavo processes that data to provide the service and follow the organization's legitimate instructions, in addition to its own duties.
5. Sharing
We may share strictly necessary data with infrastructure, authentication, communication, payment, fraud-prevention, and support providers, always for the applicable purpose. Information selected for a public listing may be seen by visitors. We do not sell personal data as a product.
6. Cookies and similar technologies
We use cookies and similar technologies to maintain sessions, remember preferences, protect forms, measure performance, and, when authorized, support communication and service improvement. You can manage cookies in your browser; blocking some of them may affect essential functions.
7. Security
We apply technical and organizational controls compatible with service risks, including access controls, organization-level data separation, security records, and credential protection. No system is invulnerable; use strong passwords and never send passwords, access codes, or card data in messages.
8. Retention and deletion
We retain data for the period needed for the stated purpose, legal and contractual duties, defense of rights, and abuse prevention. When that period ends, data is deleted, anonymized, or securely retained where there is a legal basis to do so.
9. Your rights
You may request confirmation of processing, access, correction, sharing information, anonymization, blocking, deletion where applicable, portability, consent withdrawal, objection, and review of solely automated decisions, within legal limits. We may request minimum information to confirm identity and protect the account.
10. Updates to this Policy
This Policy may be updated when the product, services used, or law changes. The version shown on this page identifies the current document. If a change requires a new choice, we will provide the appropriate notice or mechanism before the related processing.
11. WhatsApp integration
When an organization authorizes a connection, we process WhatsApp business account and phone number identifiers, contacts, message content and media, timestamps, sending, delivery and read statuses and the assigned agent's identity. If history synchronization is authorized and available, we also receive the data Meta provides through that flow. We use this information to operate customer service, assign conversations, show their history and protect the integration. Conversations are private to the organization and authorized team, are not published in the Marketplace by connecting the integration, and may contain data about people without a Kavo account. The store determines its customer service purposes and Kavo processes conversations to provide the service; account, security and support data follow the other purposes in this Policy. Meta participates in WhatsApp transmission and processing under its policies; we use Supabase for database and storage and Vercel for application hosting. These services may involve processing in other countries; information about recipients and processing is available through our privacy contact. Credentials remain on the server, are not shown to agents and become unusable through the integration when authorization is revoked. Disconnecting does not automatically erase existing records. To request access, correction or deletion, including without a Kavo account, follow the data deletion instructions or email suporte@kavocar.com.
Privacy and exercise of rights
For privacy questions or to exercise rights related to your data, use the official privacy channel suporte@kavocar.com. For your security, do not send passwords, access codes, or sensitive documents in the first message; the team will guide you to the appropriate verification channel.
Talk to Kavo