GDPR & Data Protection
How Kwill handles personal information, protects it, and supports your data-protection rights.
GDPR Overview
An overview of how Kwill approaches personal data, aligned with our Privacy Policy.
Personal data handling
We collect the information you provide during registration — such as your name, email address, and business name — and use it only to operate and improve the service.
Data protection
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We use Row-Level Security policies to isolate user data at the database level.
User rights
Depending on your location, you may have the right to access, correct, delete, or export your personal data. See the User Rights section below.
Data retention
We retain your account data for the active duration of your subscription plus 30 days following cancellation, after which it is permanently deleted or anonymized.
Data deletion
You can request deletion of your account and associated personal data at any time. We do not sell your personal information.
Privacy responsibilities
Kwill acts as the controller of account data you provide and as a processor for data you store about your own clients. See Data Processing below.
User Rights
Depending on your location, you may have specific rights under laws such as the GDPR or the California Consumer Privacy Act (CCPA).
Right to access
You can request a copy of the personal data we hold about you.
Right to correction
You can ask us to correct inaccurate or incomplete personal data about you.
Right to deletion
You can request the deletion of your account and associated personal data.
Right to data portability
You can request an export of your personal data in a structured, machine-readable format.
Right to object / restriction
Where applicable, you may have the right to object to or request restriction of certain processing, including non-essential analytics.
Data Processing
Kwill plays two roles when it comes to personal data — and it helps to keep them distinct.
Kwill's responsibilities
We protect the account data you provide to us, keep it encrypted in transit and at rest, and act as the controller for the data we collect to run the service.
Customer responsibilities
When you store information about your own clients in Kwill, you remain responsible for that data, including how you collect it and the rights you grant to your clients.
Third-party processors
We use a small set of vetted subprocessors, for hosting, email, payments, and analytics. They are named in our Privacy Policy.
Data Requests
To exercise any of the rights above — access, correction, deletion, portability, or objection — email us at support@getkwill.com.
Business customers who need a Data Processing Agreement can request one here.