Privacy Policy

1. Who we are

This policy explains how Kavina Pty Ltd ("Kavina", "we", "us") handles personal information on kavina.com.au (this website) and in the Kavina product.

We're bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What we collect

Waitlist. Your email address and postcode. We use your postcode to decide which areas to open first and to tell you when Kavina reaches you.

Account. Your name, email address and sign-in details. If you buy credits, our payment processor gives us a record of the transaction (amount, date, the last four card digits and card brand). We never see or store your full card number.

Workshops. If you register a workshop: business name, ABN, contact name, email, phone, suburb, the makes you specialise in, and the outcomes of inspections we refer to you.

Vehicle information you submit. Make, model, year, odometer reading, VIN, registration number, listing links and anything else you enter to run a report. A VIN on its own doesn't identify you, but it's linked to your account, so we treat it as if it were personal information.

AI Advisor. The questions you ask and the answers you receive.

Support. What you send us when you contact us.

Collected automatically. On the Kavina product: device and browser type, IP address (which gives an approximate location), and error and usage logs so we can keep the service running and fix problems. This marketing website doesn't run analytics.

3. How we use it

We use your information to:

generate the reports you ask for and keep them in your account
process payments and manage your credits
answer your questions through the AI Advisor
connect you with a partner workshop when you choose to book one
send you service emails such as receipts, report notifications and policy change notices
send waitlist and product updates, if you've opted in (every email has an unsubscribe link, as the Spam Act 2003 requires)
prevent fraud and misuse, and meet our legal obligations
improve Kavina, including the known-issues database our reports are built on

About the AI Advisor. The AI Advisor is powered by Anthropic, which processes your questions under a contract with us. Anthropic doesn't use them to train its models. Don't enter other people's personal details or anything you'd rather we didn't store.

When we use vehicle and inspection data to improve Kavina, we de-identify and aggregate it first. An insight like "this engine commonly fails around 150,000 km" never carries your name or a specific car's VIN or registration number.

4. Who we share it with

We don't sell personal information, and we don't share it for advertising.

Partner workshops

When you book an inspection, we send that workshop your first name, contact details and the relevant report. Nothing else unless you choose to share it.

Data sources

To build a report, we send the VIN or registration number (never your name) to the registers listed in section 5.

Service providers

Hosting and database (Vercel, Supabase), payments (Stripe), email (Resend), error monitoring (Sentry) and AI (Anthropic). Each is contractually limited to using the data only to provide its service to us.

Where the law requires it

In response to a court order or a lawful request from a government agency, or where disclosure is needed to prevent serious harm.

Overseas. Some of these providers store or process data outside Australia, mainly in the United States and the European Union. Before we send personal information overseas, we take reasonable steps to ensure it's handled consistently with the APPs (APP 8).

5. Third-party data sources

A Kavina report draws on:

the Personal Property Securities Register (PPSR), for encumbrances
NEVDIS, for registration, written-off and stolen status and odometer readings
RedBook, for valuation ranges
ProductSafety.gov.au, for recalls
Kavina's own known-issues database

We pass your vehicle query to these sources to get a result. We don't control what they hold, and register data can be incomplete or out of date. Registers also don't show service history or a vehicle's current mechanical condition, which is why reports point you to a mechanic when it matters.

Understand your PPSR car search result

6. Storage, security and retention

We store data on encrypted infrastructure and limit access to the people who need it for their work.

Reports and their vehicle data: 7 years, so you can show a purchase history if you need one, or until you ask us to delete them (subject to records we must keep by law)
Payment records: 7 years, as tax law requires
Waitlist details: Deleted if you unsubscribe or withdraw consent
AI Advisor conversations: 12 months
Support conversations: 2 years

If a data breach is likely to cause you serious harm, we'll notify you and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.

7. Your rights

You can ask us to give you a copy of the personal information we hold about you, correct it, or delete it. You can also withdraw from marketing at any time. Email privacy@kavina.com.au and we'll respond within 30 days. Reasonable requests are free.

We may have to keep some records, such as transaction records we're legally required to retain. If we can't delete something, we'll tell you why.

Kavina is for adults: you must be 18 or older to create an account, and we don't knowingly collect information from children.

8. Cookies

This marketing website sets no cookies and runs no analytics or advertising trackers. Joining the waitlist sends your email and postcode to our database and nowhere else.

The Kavina product uses essential cookies to keep you signed in and to secure checkout. We don't use third-party advertising trackers.

9. Contact and complaints

Send privacy questions and requests to privacy@kavina.com.au. We'll acknowledge complaints within five business days.

If you're not satisfied with how we handle a complaint, you can escalate it to the OAIC at oaic.gov.au.

Kavina Pty Ltd · Melbourne, Victoria, AustraliaGoverned by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.