Privacy
This site measures how it is read: which parts hold attention and which are skipped. It sets no cookies, runs no third-party analytics and carries no advertising. This policy also explains Gmail access when you connect your account to KUVE Finance.
Gmail: access you authorize
KUVE Finance connects to Gmail only after you authorize it through Google. We request your account email, read-only access to messages and attachments (gmail.readonly), and permission to send messages on your behalf (gmail.send). We use relevant invoices, bank statements and tax correspondence to provide the accounting services you request, and send only the correspondence you instruct us to send. These permissions do not allow us to delete your messages. We never receive your Google password.
Gmail: internal storage and retention
Gmail authorization tokens are encrypted in KUVE's internal database on the accountant PC within KNET. The decryption key is held separately as a restricted system credential. Gmail tokens are not stored in Supabase or Vercel. Google processes authorization and Gmail API requests; the KUVE HTTPS gateway routes the connection to the accountant PC. Access tokens are kept in process memory. Temporary authorization sessions expire after 15 minutes and are removed after one day. Replaced or revoked token values are removed from the live database; internal backups may retain earlier encrypted copies until their normal rotation.
We retain the accounting documents needed for your requested service and applicable record-keeping duties. You can request their deletion; records that must be retained by law are kept only for that obligation. Minimal consent records include the mailbox, date, permissions and connection status. Access is limited to authorized KUVE staff and service processes.
Google API data: Limited Use
KUVE Finance's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Gmail data, use it for advertising, or use it to train general-purpose AI or machine-learning models. We do not transfer it to third parties except as necessary to provide the service you request, with your permission, for security, or as required by law. Human access is limited to your explicit permission for the relevant service, security investigations, or legal obligations.
Disconnect Gmail or request deletion
You can revoke KUVE Finance access at any time in your Google Account's third-party connections (myaccount.google.com/connections). You can also ask mario.mendizabal@feproms.com to disconnect the account, revoke and remove its stored token, or delete data subject to the record-keeping obligations described above. Revoking access stops future Gmail access; it does not automatically delete accounting documents already collected. The Gmail connection uses temporary secure cookies to bind the authorization to your browser; these are separate from this website's analytics.
Website: no cookies
Nothing is stored on your device beyond a random key kept in your browser's session storage, so that the pages you open in one sitting count as one visit. It disappears when you close the tab. It carries no name, no email and no identifier that follows you anywhere else.
What is recorded
For each visit, on our own servers:
- Your full IP address, and the country, region and city your network resolves to.
- Browser, operating system and device type, and the raw user-agent string your browser sends.
- Where you came from (the referring link, and any campaign parameters in the address).
- Language, time zone, screen and window size.
- Which pages and sections you opened, how long each one was in front of you, how far down you scrolled, and which links and buttons you clicked.
What it is for
To know which parts of this site are worth the space they take, and which are not. Nothing else. It is not used for advertising, it is not combined with any other source, it is not sold and it is not shared with anyone. The legal basis is our legitimate interest in understanding how our own site is read (GDPR art. 6.1.f).
The contact form
It is not sent to any server of ours. Pressing Send opens your own mail program with the message already written, and it travels from your mailbox to ours like any other email. We record that the button was pressed — never what you wrote in it.
Where it is kept, and for how long
On infrastructure we control, in the United States (Vercel for the site, Supabase for the database). Access is closed at the database itself: no browser, logged in or not, can read a single row. Visits are deleted automatically twelve months after they happen.
Your rights
You can ask what we hold about you, ask us to correct it, delete it, or object to the measurement altogether. Write to the address below and it is done — there is no form to fill in. If you would rather not be measured at all, browsing with your browser's private mode or an analytics blocker is enough.
Data controller: Business Kuve LLC, 1111B S Governors Ave STE 3868, Dover, DE 19904, United States.