Privacy Policy

Last Updated: July 18, 2026

Effective Date: July 18, 2026

1. Introduction

Welcome to Kawthar ("the Platform"), operated by Kawthar LLC ("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and share information when you use our platform, including our Events, Marketplace, and Groups services. By using Kawthar, you agree to the practices described in this policy.

2. Information We Collect

We collect information in the following ways:

2.1 Information You Provide

Account Information: Name, email address, date of birth, and password when you create an account. If you sign up with Google, we receive your name, email, and profile photo from Google.
Invitation Code: The invitation code used during signup, which links your account to the person who invited you.
Profile Information: Any additional information you add to your profile, such as a bio, avatar, or saved addresses.
Marketplace Data: Product listings, order history, shipping addresses, and payment information (processed by Stripe — we do not store your full card number).
Event Interactions: Events you bookmark, RSVP to, or view.
Group Activity: Groups you join, discussions you participate in, and meetups you attend.
Civic Advocacy Details: When you use the Civic Center to contact an official (copying a script, opening an email, placing a call, or visiting an official's website through Kawthar), we record: your name, email, phone, and address; the action type; the bill or campaign; the contacted official or office; the time of the action; the unpersonalized script template used; and related engagement metadata. We use this information to match your districts and officials, facilitate your advocacy action, follow up on campaigns, measure advocacy engagement, organize future related civic outreach, prevent fraud and abuse, and maintain program records. We do not store the personalized letter body itself. See Section 7 (Data Retention) for how long this is kept.

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, search queries, and interaction patterns.
Device Information: Browser type, operating system, device type, and screen resolution.
Log Data: IP address, access times, and referring URLs.

3. How We Use Your Information

We use the collected data to:

Create and manage your account, including verifying your identity and invitation code.
Provide, maintain, and improve the Platform and its services.
Facilitate marketplace transactions, including payments, shipping, and order tracking.
Show you relevant events, groups, and products based on your location and interests.
Communicate with you about your account, orders, and platform updates.
Enforce our Terms of Service and protect against fraud, abuse, and unauthorized access.
Analyze usage patterns to improve the Platform experience.

4. Data Sharing and Third Parties

We use the following service providers (subprocessors) to operate the Platform, and share information with them only for the purposes described:

Supabase (authentication, database, and file storage): stores your account, profile, and application data on our behalf. Governed by Supabase's Privacy Policy.
Stripe (payments): receives your payment information directly for marketplace transactions. Governed by Stripe's Privacy Policy.
Google (OAuth sign-in): if you sign in with Google, Google receives information about your authentication request. Governed by Google's Privacy Policy.
PostHog (product analytics): receives usage and page-navigation events to help us improve the Platform. IP addresses are anonymized and session recording is disabled. Governed by PostHog's Privacy Policy.
Sentry (error monitoring): receives technical error diagnostics. Session replay is captured only when an error occurs and is fully masked. Governed by Sentry's Privacy Policy.
Cicero (Azavea) (civic data): used in the Voting Center to match addresses to districts, officials, and polling places. See the Civic and Voting data flow note below. Governed by Cicero's Privacy Policy.
Email and SMS providers: used to deliver transactional messages and alerts you request (for example, account, order, and event notifications).
Geocoding providers: address lookups for maps and district matching are processed through the U.S. Census Geocoder and OpenStreetMap Nominatim.
Shipping Providers: shipping addresses are shared with carriers to fulfill marketplace orders.
Marketplace Vendors: when you purchase from a vendor, they receive your name and shipping address to fulfill your order.
Legal Requirements: we may disclose your information if required by law, court order, or governmental request.

Civic and Voting data flow

When you look up your officials, your address is sent from our servers (not directly from your browser) to our civic-data provider (Cicero) to determine your districts and elected officials; we do not attach your account identifier to that request. Advocacy actions you take in the Civic Center are recorded as described in Sections 2 and 3. The Voting Center uses the same civic-data provider to return polling places and official election resources.

Mobile information and SMS

No mobile information will be sold or shared with third parties or affiliates for marketing or promotional purposes. If you verify a phone number, it is used only to send the messages you asked for — a one-time verification code, and reminders for events you RSVP'd to if you turn those on. Your number is shared with our SMS delivery provider solely to transmit those messages, never for their own marketing. Text messaging originator opt-in data and consent are not shared with any third party. SMS reminders are off by default, require a verified phone number, and can be stopped at any time by replying STOP; reply HELP for assistance. See our SMS Terms & Opt-In Policy for the full program details.

We do not sell your personal data to third-party advertisers, data brokers, or marketing companies.

5. Cookies and Local Storage

We use cookies and browser local storage for:

Authentication: To keep you signed in and manage your session securely.
Preferences: To remember your settings and display preferences.
Temporary Data: Such as invite codes during the signup process (cleared after use).

We do not use third-party tracking cookies or advertising cookies.

6. Data Security

We implement industry-standard security measures to protect your data, including:

Encryption of data in transit (TLS/SSL) and at rest.
Database access controls that ensure users can only access their own data.
Secure authentication through our authentication provider, Supabase, using industry-standard password hashing.
Ongoing security reviews and access controls.

While we strive to protect your personal information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal, tax, or compliance purposes. Civic advocacy contact records (see Section 2.1) are retained while our civic programs operate so organizers can follow up and support your future civic engagement; you may request their deletion at any time and we will honor it within 30 days. Anonymized or aggregated data that cannot identify you may be retained indefinitely for analytics purposes.

8. Your Rights

You have the right to:

Access: Request a copy of the personal information we hold about you.
Correction: Update or correct inaccurate information in your profile.
Deletion: Request deletion of your account and personal data.
Portability: Request your data in a machine-readable format.
Opt-Out: Opt out of non-essential communications at any time.

You can manage most of these directly through your dashboard settings. For other requests, contact us at the email below.

9. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of any sale of personal information. As stated above, we do not sell personal information. To exercise your CCPA rights, contact us at the email below.

10. Children's Privacy

Kawthar is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

[email protected]

Back to Home