Your data.
A defined purpose.
Kinevra provides browser utilities, AI drafting tools, data report checks, and advisory services. This notice describes what happens when you use each type of tool, create an account, make an available purchase, or contact us.
Sessions and offline licenses
To limit account sharing, we store keyed HMAC references for the account and session, with the last protected-service activity time. This control stores no IP address or device fingerprint. References stop occupying a slot after 30 minutes of inactivity and are removed by periodic cleanup; account deletion removes them too. Allowances remain per account.
Offline downloads carry a license reference derived from the account. It contains no email address or file data. Kinevra can associate it with the account to investigate unauthorized distribution; anyone viewing a copy can also see the reference. The file does not track usage or contact licensing servers. We cannot erase downloaded copies.
Portable review projects
Review projects process successive CSV snapshots and reviewer notes in the open page. They do not automatically save those contents in browser storage or upload them to Kinevra. Download a project to retain its original snapshots, fixed rules and review decisions. Opening it checks its fingerprints and recomputes findings; this does not verify who supplied or approved the data.
You can explicitly password-protect a review-project download. Its password is not saved or sent to Kinevra and cannot be recovered. Plain JSON projects, printable handoffs and evidence bundles are separate unencrypted downloads and may contain confidential source values and reviewer names. Protect those files under your organization’s policies; account deletion cannot erase downloaded copies.
Connected SAP review projects also retain parsed source worksheets, original row references, mapping settings and file fingerprints. Their saved records can include rows excluded from the review. They do not include the original workbook binary. Source fingerprints identify files; they do not authenticate an SAP system or prove who approved the data. Normalization and findings are checked again when reopening a project.
Who is responsible for your data?
Kinevra is responsible for personal data relating to website visitors, customer accounts and business inquiries. Legal operator: Daniel Mitchell Rentz, doing business as Kinevra, Florida, United States. Use the contact option below for privacy questions.
Creating hosted reports and AI drafts requires sign-in and a verified primary email. Email verification is used for account security and abuse prevention. It is not required to use free browser-local utilities or inspect fictional examples, and does not add a new verification requirement to existing history, downloads or privacy controls.
Local browser utilities
The tools labeled “Browser utilities” process text in your browser. Their input and output are not uploaded to Kinevra for processing or saved to your account. Current work stays in the page’s memory until you clear it, select another utility, or leave the page. Downloaded files and copied text are under your control. Ordinary website delivery, authentication, and security requests described below may still occur; they do not include utility input or output.
Import workspace and sample tests
The import workspace processes source files, mappings, comparisons, and sample test packs locally in this browser. They are not uploaded for processing or saved to your account. Saving a recipe stores only its name, baseline column names, field mappings, and validation rules on this browser; it does not store source rows, results, or sample cases. Recipe names and field names may still contain confidential information. Delete saved recipes in the import workspace or clear this site’s browser storage. Account deletion does not clear local recipes.
Downloaded test packs include up to 10 sample source rows and expected outputs. Review bundles include transformed values, rejected rows, rules, and file fingerprints. Download these files only to an approved location. Current work remains in page memory until cleared or the page is closed; downloads remain under your control.
Reference files in the import workspace are also processed in page memory. Saved recipes contain reference-column choices, combined-key definitions and numeric limits, but not reference records. Review bundles identify a used reference file by its fingerprint and row count without including its rows. Sample packs do not include reference data; reload the approved reference file for those checks.
SAP export preparation
SAP spreadsheet and text exports are opened, filtered, normalized and reviewed locally. Downloaded import profiles contain column mappings, system/client constants, date settings and filters; they do not contain source rows. Source-evidence downloads can contain original field values, normalized records, findings and excluded-row references. They are not encrypted. No source file, profile or result is automatically saved or uploaded by the SAP importer. Keep downloads and the original file in an approved location.
Tool favorites
If you save a favorite, Kinevra stores only that tool’s identifier in this browser’s local storage. Favorites do not contain your inputs or results, are not uploaded or synced to an account, and can be removed using the star button or by clearing this site’s browser storage.
Reusable settings and reviewed handoffs
If you save reusable settings, this browser stores their label, tool identifier, and selected options, such as column names, keys, or comparison modes. Presets do not include filenames, file contents, prompts, or results. Avoid personal or confidential information in settings labels and column names. Saving a preset does not upload it or sync it to your account. Remove it with the settings controls or by clearing this site’s browser data.
When you choose a next tool, prepared text or CSV can pass to that editor within the current page. This handoff stays in page memory and does not automatically run the next tool or upload the input. Review the prepared data and settings before running it. A report run still requires your permission and sends the selected files and settings to the processing service. Download anything you want to keep; local work is not an account backup.
Execution workspaces and offline downloads
Batch checks, reconciliation and message contracts process inputs in page memory. Files are not uploaded for processing. Reconciliation can save rule names, column choices, unit labels and tolerances in this browser when you choose Save; records, results and review notes are not included. Batch and message workspaces do not save inputs automatically. Closing or clearing the page discards current files and notes.
Evidence downloads may contain exact source or transformed records, field names and your review notes. Message-check bundles omit source message bodies but contain rules and findings. Keep downloaded files in an approved location. Rule files and filenames can themselves contain confidential information.
Pro web access and offline-kit downloads require an account and an active entitlement check. Files inside the advanced workspaces still process locally. The downloaded offline kit runs as local HTML without account services or network connections. Its storage and downloaded files remain under your control. It does not upload, synchronize or update itself, and a downloaded version continues working after cancellation. Active Pro is required to obtain updates.
Local processing does not grant permission to use company data or bypass security review. Follow your organization's policies. Hosted report checks upload files to Kinevra, and AI drafts send the text you approve to Cloudflare Workers AI; those paths have different data handling from the local workspaces.
Accounts and authentication
An account is required for AI generation, Pro access and subscription management. Clerk provides email-based registration, verification, sign-in, and account controls, and processes your email address, authentication identifiers, session information, and related technical data to provide that service. Authentication uses essential cookies and browser session mechanisms. Kinevra verifies your session before granting account access. See Clerk’s privacy information for details about its services.
Kinevra maintains a pseudonymous account usage ledger with lifetime trial usage, monthly AI and report allowances, billing-period dates, subscription state and payment-provider references. These records support access control, billing and retry handling. Minimal AI history includes task type, request reference, input fingerprint, status and timestamps, not prompt or output text. Account-related usage records persist for account administration; required billing and cancellation records can remain after account closure.
AI drafting and saved results
When you confirm permission and select Generate, Kinevra sends your supplied text and the selected drafting instructions to Cloudflare Workers AI. Prompts are processed in memory and are not stored or logged by Kinevra. The model provider processes the request under its service terms and policies; see Cloudflare’s Workers AI data-use documentation. Do not include credentials, confidential records, or sensitive personal information in a prompt.
The original AI output is encrypted before storage in Cloudflare D1 and can be opened by your authenticated account for 24 hours. Outputs may repeat information from your input. The application decrypts the stored output when returning it to your authorized session. Recent drafts provides a delete action to remove active access. Local edits to a draft are not saved back to the account; copy or download those edits if you want to keep them.
Expired output contents are removed from the active database by scheduled cleanup, normally at the next hourly cleanup. Deleting an output or letting it expire does not erase its minimal usage and retry metadata or restore an allowance for a successfully generated draft. Provider backups may retain earlier encrypted versions after active deletion, as explained below.
CSV uploads and report processing
Creating a report preview sends your selected CSV contents, filenames, and check settings to Kinevra’s processing service on Cloudflare. The service processes those files in memory using deterministic validation and comparison rules. Original uploaded files are not saved. The current report tools do not send your files to an AI model or connect to a live SAP system.
The resulting report may include source values, filenames, identifiers, findings, and recommendations. Report contents are encrypted before they are stored in Cloudflare D1. Encryption at rest does not mean the service cannot read the report: the processing service decrypts it to return your authorized preview or paid result.
Only upload information you are authorized to share. Use a focused export and replace personal or confidential identifiers where possible. Do not submit passwords, API keys, payment-card data, health records, government identity numbers, or other sensitive personal data. The access-review tool can work with pseudonymous user identifiers.
Report retention, deletion, and backups
Report access expires 24 hours after preview creation, including time before checkout. The service rejects access after that deadline. A scheduled cleanup removes expired report contents from the active database, normally at the next hourly cleanup. The report page also provides a delete action that removes its contents from the active application and ends access immediately.
Cloudflare’s database recovery and backup systems may retain earlier encrypted versions after active records are deleted, according to the provider’s recovery retention. This means expiry or deletion does not promise immediate erasure from every provider backup. Downloaded copies on your device are under your control.
Minimum report and payment reconciliation metadata, without the uploaded CSV or report contents, is retained for up to 90 days in the application. Stripe, email correspondence, and business records have separate retention requirements. Records needed to meet legal obligations or address a payment dispute may need to be retained longer.
Browser and account access
Report previews initially belong to the browser that created them and do not require an account. An essential, secure, HTTP-only cookie identifies that browser; the application stores a hash of its token to check access. You can explicitly choose “Save to my account” for an active report while signed in from its original browser. This stores a pseudonymous account association and lets that account reopen the report on other devices. Signing in alone does not link reports. The original browser can still access a linked report.
A report link alone does not grant access. Use the original browser with its cookie intact, or sign in to the account you explicitly linked. If you did not link the report, clearing cookies, switching browsers, or ending a private-browsing session can prevent access. Linking does not extend the original 24-hour deadline, pay for a report, or unlock its complete contents. Applicable payment checks still apply. Full report contents and payment entitlements are not saved in local storage. Download results before expiry; contact us if you paid and cannot obtain them.
Payments through Stripe
When checkout is available, Stripe processes payment on its hosted page. Kinevra receives customer and subscription references, status, billing-period dates, cancellation state, amount, currency and contact details supplied by Stripe. These records support recurring billing, entitlement checks and cancellation requests. Kinevra does not receive your full card number. Source files, report contents and AI prompts are not sent to Stripe as payment metadata.
Stripe processes payment information and fraud-prevention data under its privacy policy. We verify payment on the server before allowing full report access. A return URL or receipt screenshot alone is not payment verification.
Website delivery and abuse prevention
Cloudflare delivers and protects the website and may process IP addresses, request information, and security logs. Kinevra uses short-lived rate-limit records based on hashed IP, account, and browser identifiers to limit abuse and manage capacity. Application logs are designed to exclude CSV contents, report contents, AI prompts and outputs, utility text, filenames, secrets, and complete payment payloads.
Optional Cloudflare Web Analytics and Clerk SDK telemetry are disabled for this website. We do not load advertising trackers. Essential service delivery, authentication, fraud prevention, and security logging still occur.
Kinevra does not add advertising trackers to the tools. Cloudflare may process ordinary delivery or performance information under its own service policies. Learn more about Cloudflare’s privacy practices.
Inquiries and personal assessments
The service inquiry form opens your email app with a draft. It does not transmit the form to Kinevra by itself. If you send an email, we receive your address, message, and any information you choose to share, through the email providers involved.
We use correspondence to respond, agree a scope, deliver advisory work, and handle support. Initial inquiries should not contain confidential files. For a personal assessment, a suitable sample handoff and the required data handling are agreed before work begins. Correspondence and deliverables may be retained for the engagement and business records; ask us about deletion.
Optional tool feedback
If you provide feedback, the tool prepares an email draft with the tool name, your selected response, and the text you enter. It does not automatically attach input files or results. Review the draft and send it yourself; preparing it does not send anything to Kinevra. Feedback you send is handled as correspondence through the email providers described above. Avoid including confidential or sensitive personal information.
Your privacy controls
Sign in to export your Kinevra AI account records and available AI results as JSON, or remove saved AI content. Large exports are split into numbered pages. My reports provides a separate paginated export of metadata for reports you explicitly linked, such as references, tool, status, and creation and expiry times. That metadata export does not contain uploaded CSVs or report findings; open an available report for its contents, subject to payment and expiry checks. Export every page of each list you need. These controls do not charge credits.
Deleting saved AI content keeps your account and its existing allowance. Separate checkboxes let you include reports linked to your account across devices and reports owned by the current browser. Including reports removes their active contents and account associations, without itself creating a refund. To close the account, complete Clerk’s deletion confirmation in account security settings. Its verified notification removes the associated Kinevra AI account, stored drafts, and account-linked report contents and associations. Opening settings or signing out does not perform this cleanup.
Account closure does not identify or remove browser reports that were never linked to that account, or automatically erase email correspondence, payment records, browser-local settings, or downloaded copies. Use the report’s delete control, the relevant privacy checkbox, or contact us with its reference for help. Required payment and business records may be retained under an applicable basis even after report content and account associations are removed. Provider backup retention and lawful exceptions still apply.
After account deletion, a keyed hash blocks old authenticated sessions for 24 hours and 5 minutes. A hashed notification receipt, without an account link, rejects duplicate delivery for 7 days. These temporary security records are removed from the active database after their deadlines, normally at the next hourly cleanup.
Account deletion initiates subscription cancellation and revokes Kinevra access. Stripe must confirm the cancellation; minimal provider references and pending-cancellation records may be retained to retry it and prevent further billing. Cancel renewal through the billing portal before account deletion, and contact us if confirmation is missing. Removing saved tool content alone does not cancel billing.
Minimal Kinevra subscription references and billing-period allowance records are removed 90 days after account deletion and confirmed cancellation. They may be retained longer while cancellation or a billing dispute remains unresolved. Stripe retains its own financial records under its policies.
Why we process personal data
Where the GDPR applies, necessary account administration, requested AI drafting and report processing, and service delivery rely on performing a contract. Pre-contract steps you request, such as preparing a service proposal, use the same basis. Providing minimum account details is necessary for account-based tools; free browser utilities remain available without an account.
Security and proportionate abuse prevention rely on our legitimate interests in operating a reliable service and protecting customers. We balance those interests against your rights, minimize retained data, and provide a way to object. We rely on legal obligations for records required by applicable EU or Member State law. Other business-record retention is assessed under an appropriate basis, including legitimate interests where justified.
The AI checkbox confirms your permission to send text to the provider for the drafting service you request. You can stop using AI at any time and use the privacy controls or contact us about existing data. If we rely on consent for other optional processing, we will explain that use and how to withdraw consent; withdrawal does not affect processing that was lawful beforehand. We do not enroll inquiries or accounts in marketing campaigns.
Language and contact preferences
On a first visit we use the browser’s language preference, without geolocation. A language cookie remembers English or Spanish for up to one year; the language switch replaces that preference. Saved tool favorites stay only in this browser until removed. A single local timestamp limits repeated opening of inquiry email drafts; it contains no form text or contact details. Clear site data in your browser to remove these preferences.
Providers and international processing
Cloudflare provides hosting, security, database storage, and optional AI processing; Clerk provides authentication; Zoho Mail handles the Kinevra mailbox. Stripe processes payment details only when checkout is available. These providers may process data in the United States and other countries. The site does not promise EU-only storage.
For transfers subject to GDPR restrictions, an applicable transfer mechanism and processor terms must cover the processing, such as standard contractual clauses or an applicable adequacy decision. Contact us for the safeguards relevant to your engagement or to arrange a required data processing agreement before supplying personal data on behalf of your business. A provider’s privacy policy alone is not a customer-specific data processing agreement.
Kinevra does not sell personal data or use tool inputs for advertising. AI drafts and report findings are suggestions for human review; Kinevra does not use them to make legal, employment, credit, or similarly significant decisions about people.
Your rights and how to contact us
Where applicable, you may request access, correction, erasure, restriction, portability, or object to processing. You may also withdraw consent and complain to the data protection authority in the country where you live, work, or believe an infringement occurred. These rights can have legal conditions and exceptions.
We respond to GDPR rights requests without undue delay and normally within one calendar month. If a permitted extension is necessary, we explain the reason within that first month. Ordinary requests are free. We may ask for proportionate proof of account or report ownership; do not send identity documents or payment-card details unless a secure, necessary verification method has been agreed.
For a full rights request covering authentication records, correspondence, or other data beyond the self-service export, contact us below. Include the relevant account email or report reference, and describe what you need. You do not need an active account to make a privacy request.