Privacy Policy

01Who we are

KIV Labs Inc., a federally incorporated Canadian corporation operating as "Risova" ("Risova," "we," "us," or "our"), with its principal place of business at 95 King St E, Unit 100, Toronto, Ontario, Canada, M5C 1G4, operates the Risova service — an Answer Engine Optimization audit tool for Shopify merchants accessible at risova.io and app.risova.io (collectively, the "Service").

This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and the rights you have over it. By using the Service, you agree to the collection and use of information in accordance with this policy.

02Information we collect

Information you provide directly

• Account information. Email address, name, hashed password, organization name, role, and time zone.
• Billing information. Plan tier, billing address, and the last four digits of your payment method. Full payment card details are handled by Stripe, Inc. and never stored on our servers.
• Store URLs. The Shopify storefronts you submit for audit, plus any custom domain mappings you provide.
• Support correspondence. Messages you send us via email, in-app chat, or contact forms.

Information we collect automatically

• Audit data. Public product page HTML, schema markup, sitemap entries, robots.txt, and HTTP response metadata for stores you submit.
• Usage data. Pages viewed, features used, audit run timestamps, and click events on dashboard elements.
• Device data. IP address, browser type and version, operating system, and approximate location derived from IP (city-level).
• Cookies and similar technologies. See our Cookie Policy for the full list.

03How we use information

We process personal information for the following purposes, and on the legal bases noted (relevant for users in the EEA, UK, and Switzerland):

• Provide the Service — running audits, returning reports, maintaining your account. Legal basis: contract.
• Bill and prevent fraud — processing payments, detecting anomalous usage. Legal basis: contract; legitimate interests.
• Improve the Service — diagnosing bugs, measuring feature adoption, training internal classifiers (we do not train third-party LLMs on your data). Legal basis: legitimate interests.
• Communicate with you — transactional email (audit completion, billing, security), and product updates you may opt out of at any time. Legal basis: contract; consent for marketing.
• Comply with law — tax, accounting, response to lawful requests. Legal basis: legal obligation.

04How we share information

We do not sell personal information. We share it only with the following categories of recipients:

We may also disclose information when required by law, in response to a valid legal request, to protect the safety of users, or in connection with a merger, acquisition, or sale of assets (with notice).

05International data transfers

Although we are a Canadian company, our servers and those of our service providers are located in the United States (primarily AWS region us-east-2). Your personal information is therefore stored and processed in the United States and may be accessible to U.S. authorities under applicable law. For transfers from the EEA, UK, or Switzerland, we rely on the Standard Contractual Clauses approved by the European Commission and supplementary measures where required.

06Data retention

• Account data: retained while your account is active.
• Audit history: retained while your account is active; exportable as CSV at any time.
• Billing records: retained for 7 years to meet tax and accounting obligations.
• After account deletion: personal data is permanently deleted within 30 days, except where retention is required by law.

07Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict our processing of your personal information; to object to processing based on legitimate interests; and to withdraw consent at any time without affecting the lawfulness of prior processing.

Canadian residents have rights under the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws (including Quebec's Law 25): you may request access to the personal information we hold about you, ask us to correct it, and withdraw consent subject to legal or contractual restrictions. If we cannot resolve your concern, you may file a complaint with the Office of the Privacy Commissioner of Canada.

California residents have additional rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of "sharing" for cross-context behavioral advertising. We do not sell or "share" personal information.

To exercise any of these rights, email [email protected]. We respond within 30 days.

08Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information, including TLS in transit, AES-256 at rest, role-based access controls, and SOC 2 Type II controls maintained by our infrastructure providers. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

09Children's privacy

Risova is a business tool not directed to children and is intended for users who are at least 18 years old. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact [email protected] and we will delete it.

10Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notice or email at least 30 days before they take effect. The "Last updated" date at the top reflects the latest revision.

11Contact

For privacy questions, requests, or to reach our Data Protection Officer:

01Acceptance of these terms

These Terms of Use ("Terms") are a binding agreement between you and KIV Labs Inc., operating as "Risova" ("Risova," "we," "us"). By creating an account, accessing, or using the Risova service (the "Service"), you accept and agree to be bound by these Terms and our Privacy Policy. If you are using the Service on behalf of a company, you represent that you have authority to bind that company.

02The Service

Risova is an Answer Engine Optimization audit tool. We crawl public Shopify product pages you submit, score them across multiple AI-readiness dimensions, and return a report with prescriptive recommendations. We may add, remove, or modify features at any time. Any new features are subject to these Terms.

03Eligibility & accounts

You must be at least 18 years old and capable of entering a binding contract. You are responsible for maintaining the confidentiality of your credentials and for all activity under your account. Notify us immediately at [email protected] if you suspect unauthorized access.

04Acceptable use

Authorized use of store data

Risova analyzes publicly accessible web pages of the store URLs you submit. By submitting a store URL, you represent and warrant that you are authorized to request analysis of that store, that your submission and use of the resulting reports comply with all applicable laws and any terms imposed by the store or its hosting platform (including Shopify's terms), and that you will not use the Service in any manner that infringes the rights of, or causes harm to, the store operator or any third party. You are solely responsible for how you use reports generated for stores you do not own or operate.

You agree not to:

• Submit URLs you do not own or have explicit permission to audit.
• Use the Service to crawl, scrape, or extract data in violation of any third party's terms or rights.
• Submit store URLs in a manner intended to circumvent plan limits — for example, rotating or cycling URLs to obtain analysis volume beyond your subscription tier.
• Use the Service for automated, large-scale, or systematic monitoring of stores you do not own or operate.
• Use the Service to harass, defame, or gain an unfair competitive advantage in violation of applicable law.
• Reverse-engineer, decompile, or attempt to derive the source code of the Service.
• Resell, sublicense, or redistribute Service output as your own competing audit product.
• Interfere with the Service's operation, including sending excessive requests or malicious code.
• Use the Service for any unlawful purpose or in violation of applicable export controls or sanctions.

05Plans & payment

We offer a Free tier and a paid subscription plan (the "Paid Plan"). The Paid Plan is billed in advance on a monthly basis, is non-refundable except as set out in our Refund Policy, and renews automatically each month until canceled.

You authorize us (and our payment processor, Stripe, Inc.) to charge your selected payment method for all fees. We may change pricing on at least 30 days' notice; changes apply at your next renewal.

If a charge fails, we may suspend Paid Plan features until payment is received. Free-tier access remains available.

06Cancellation & termination

You can cancel your subscription at any time from your account settings. Cancellation takes effect at the end of the current billing period; you retain access until then.

We may suspend or terminate your account if you breach these Terms, fail to pay fees, or use the Service in a way that risks harm to us or other users. We will give reasonable notice where practical.

Upon termination, your right to use the Service ends. Sections that by their nature should survive (intellectual property, disclaimers, liability limits, dispute resolution) survive termination.

07Your content & data

You retain all rights in the URLs, store data, and any content you submit ("Customer Content"). You grant us a worldwide, non-exclusive, royalty-free license to host, process, and display Customer Content solely as necessary to provide the Service. Aggregated, de-identified analytics derived from the Service may be used to improve our offering.

08Our intellectual property

The Service, including its software, design, scoring methodology, and brand, is the property of Risova and its licensors and is protected by intellectual property laws. We grant you a limited, non-exclusive, non-transferable license to use the Service in accordance with these Terms. No other rights are granted.

09Third-party services

The Service integrates with third-party services (e.g., Shopify storefronts, Stripe, Anthropic). We are not responsible for the availability, content, or practices of those services. Your use of them is governed by their respective terms.

10Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, RISOVA DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ACCURACY. We do not guarantee any specific outcome — including improved AI visibility, ranking, or revenue — from using the Service.

No warranty for third-party stores. Reports are generated solely from publicly available data and may be incomplete or inaccurate, particularly for stores that employ bot protection or restrict automated access. Scores and recommendations for stores you do not own or operate are estimates only. Risova makes no representation regarding the accuracy of any report and is not liable for decisions made, or actions taken, based on reports for any store.

11Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, RISOVA WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL. Our aggregate liability arising out of or relating to these Terms or the Service will not exceed the greater of (a) CAD $100 or (b) the total amount you paid us for the Service in the 12 months preceding the event giving rise to the claim.

12Indemnification

You agree to defend, indemnify, and hold Risova and its officers, directors, employees, and agents harmless from any claim, damage, or expense (including reasonable attorneys' fees) arising from (a) your breach of these Terms, (b) your Customer Content, or (c) your violation of any third-party right, including the rights of any storefront whose pages you submit for audit.

13Governing law & disputes

These Terms are governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to conflict-of-laws principles. The parties will first attempt to resolve any dispute informally. If that fails, the dispute will be referred to and finally resolved by binding arbitration administered by the ADR Institute of Canada under its Arbitration Rules, seated in Toronto, Ontario, and conducted in English. Either party may still seek injunctive or equitable relief from the courts of Ontario to protect its intellectual property or confidential information. To the fullest extent permitted by applicable law, you and Risova agree to bring claims only in an individual capacity and not as part of any class or representative proceeding.

14Changes to these Terms

We may update these Terms from time to time. Material changes will be communicated via in-app notice or email at least 30 days before they take effect. Continued use of the Service after the effective date constitutes acceptance.

15Contact

01Summary

02Free tier

The Free tier carries no charges and is therefore not subject to refund. You may stop using it at any time without notice.

03First paid charge

If you upgrade to a Paid Plan and decide it's not for you, you may request a full refund within 14 days of your first paid charge. This money-back guarantee applies once per customer.

To request a refund, email [email protected] from the address on your account, including your account email and the order ID from the Stripe receipt. We process eligible refunds within 5–10 business days back to the original payment method.

04Renewals

Subsequent monthly renewal charges are non-refundable. Cancel before your renewal date if you do not want to be charged for the next month.

• The Starter plan is billed monthly and renews on the same day each month.
• We do not currently offer annual plans. If we introduce them, their renewal terms and reminders will be described here.

Cancel any time from Settings → Billing in the dashboard. Cancellation stops future charges and you keep access through the end of the current period.

05Prorations & downgrades

Plan changes mid-cycle are prorated against your next invoice. Downgrades take effect at the end of your current billing period — no partial-period refund is issued for the unused portion of an upgraded tier.

06Failed audits & service issues

If a substantial portion of your audit fails for technical reasons on our end (not because the storefront blocked our crawler or returned errors), contact [email protected] and we'll re-run the audit at no charge or, at our discretion, credit your account for the affected billing period.

07Exceptions

• Abuse. Refunds will not be granted to accounts terminated for breach of our Terms of Use.
• Repeat refunds. The 14-day refund window applies only to your first paid charge. We reserve the right to deny refund requests that appear to abuse the policy.
• Taxes & processing fees. Refunds include taxes collected on the original transaction. Third-party payment-processor fees that are non-recoverable may be deducted where permitted by law.

08Statutory rights

If you reside in a jurisdiction with stronger statutory consumer rights (for example, Canadian provincial consumer-protection legislation, or the EU's 14-day right of withdrawal), those rights apply on top of this policy and override anything more restrictive in this document.

09Disputes & chargebacks

If you have a billing dispute, please contact us first at [email protected] — we resolve almost everything within a few business days. Initiating a chargeback before contacting us may result in immediate suspension of your account pending resolution.

10Contact

01What cookies are

Cookies are small text files placed on your device when you visit a website. They help the site remember information about your visit — your preferences, sign-in state, and how you got there. We also use related technologies such as local storage, session storage, and web beacons; for simplicity, this policy refers to all of them as "cookies."

02How we use cookies

We use cookies to:

• Keep you signed in across pages.
• Remember your preferences (theme, last-viewed audit, sidebar state).
• Understand how the Service is used so we can improve it.
• Measure the effectiveness of our marketing — only if you opt in.

03Categories of cookies we set

Strictly necessary

These cookies are required for the Service to function. They cannot be disabled in our system.

Performance & analytics

These cookies help us understand which features get used and where users drop off. You may opt out via the consent banner.

Advertising

Set only if you consent, and only while we are running paid campaigns. Used to measure which ads drive sign-ups. We are not always running ads, so you may not see all of these.

04Third-party cookies

Some cookies are set by third parties whose services we use. Their handling of cookies is governed by their own privacy policies:

• Stripe — fraud detection on the billing form. Privacy policy
• Google — Analytics & Ads measurement. Privacy policy
• Meta — ad campaign measurement. Privacy policy
• TikTok — ad campaign measurement. Privacy policy

05Managing your preferences

You can change your cookie preferences at any time:

• In Risova: click "Cookie settings" in the footer of any marketing page, or visit Settings → Privacy in the dashboard.
• In your browser: most browsers let you block or delete cookies via Settings. Note that blocking essential cookies will sign you out of the Service.
• "Do Not Track": our marketing analytics honor the Global Privacy Control signal where applicable. We do not respond to legacy DNT headers.

06Changes to this policy

We may update this Cookie Policy when we add or remove third-party scripts. The "Last updated" date at the top reflects the latest revision. Material changes will trigger a refreshed consent banner.

07Contact