01Who we are

Kovara (“Kovara”, “we”, “us”) operates kovaragrid.com, a compute market intelligence platform and the Kova agent. The data controller is [legal entity name], [registered address], [company / VAT number].

For any privacy question or request, contact us at tommasoluci@kovaragrid.com.

02Data we collect

• Account data: your email address, name and sign-in credentials. Passwords are handled by our authentication provider and are never stored in readable form.
• Workspace data: compute requests, saved offerings, organisations you belong to and your role in them.
• Kova data: your conversations with Kova and any compute preferences you ask Kova to remember (for example preferred GPUs, regions or budget).
• Provider data: if you apply to represent a compute provider, the application details, verification information and supply evidence you submit.
• Technical data: the cookies needed to keep you signed in, and standard server logs (such as IP address, browser type and request times) kept by our hosting provider for security and reliability.

We do not use advertising cookies or third-party analytics trackers.

03How we use it and why

• To provide the service you signed up for: your account, workspaces, requests and Kova (performance of a contract, Art. 6(1)(b) GDPR).
• To keep the platform secure and reliable, prevent abuse and fix problems (our legitimate interests, Art. 6(1)(f) GDPR).
• To meet legal obligations, for example responding to lawful requests from authorities (Art. 6(1)(c) GDPR).
• With your consent, where we ask for it; you can withdraw consent at any time.

04Kova and AI processing

When you message Kova, your message and the context needed to answer it (such as relevant market records and your saved preferences) are sent to an AI model provider to generate the reply. Kova is powered by Anthropic's Claude models; depending on configuration, OpenAI models may also be used.

We do not use your conversations to train AI models. Kova never sends a quote request or creates a price alert without your explicit confirmation.

05Who we share data with

We do not sell personal data. We share it only with:

• Service providers that process data on our behalf: Supabase (database and authentication), Vercel (hosting) and Anthropic and, where used, OpenAI (Kova's AI models).
• Compute providers, only when you confirm a request that involves them, and only the request details you confirmed.
• Authorities, where the law requires it.

06International transfers

Some of our service providers are located, or process data, outside the European Economic Area. Where this happens we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

07How long we keep data

We keep account, workspace and Kova data for as long as your account is active. You can archive Kova conversations and ask Kova to forget saved preferences at any time. When you delete your account, or ask us to, we delete or anonymise your personal data within [retention period], unless we must keep it longer to meet a legal obligation. Server logs are kept for a limited period for security purposes.

08Your rights

Under the GDPR you can ask to access, correct, delete or export your personal data, restrict or object to its processing, and withdraw any consent you gave. To exercise these rights, contact tommasoluci@kovaragrid.com. We will reply within one month.

You also have the right to lodge a complaint with a data protection authority. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it).

09Cookies

We only use cookies that are strictly necessary to run the platform, such as those that keep you signed in. These do not require consent. If we ever add optional cookies, we will ask first.

10Security

Data is encrypted in transit, access to workspace data is restricted at the database level to the people it belongs to, and administrative access is limited. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires it.

11Children

Kovara is a professional service and is not intended for children under 16. We do not knowingly collect their personal data.

12Changes to this policy

We may update this policy as the platform evolves. We will change the “last updated” date and, for significant changes, let you know in advance. See also our Terms of Service.