1. About this policy
Kiinora is a booking and operations platform for service businesses. Depending on how you use the service, you may be a business owner, team member, customer of a business using Kiinora, or visitor to a Kiinora website or booking page.
This policy applies to information processed through Kiinora's websites, applications, booking experiences, authentication flows, and related services. A business using Kiinora may also have its own privacy obligations and policies for information it collects about its customers.
2. Information we collect
Account and identity information
We may collect information such as your email address, account identifiers, authentication details, role, and information needed to create, secure, and manage your Kiinora account.
Google Sign-In information
If you choose Sign in with Google, Google may make basic account information available to Kiinora as permitted by the OAuth scopes you approve. Kiinora currently uses your verified email address and Google's unique account identifier to authenticate you, create or link your Kiinora account, and protect the sign-in process.
Kiinora does not receive your Google password. The Google sign-in flow used for Kiinora account access does not give Kiinora access to your Gmail messages, Google Drive files, Google Calendar events, or Google Contacts.
Business and operational information
Businesses may provide information such as business identity, locations, opening hours, services, pricing, staff, schedules, booking rules, forms, policies, promotions, and other operational settings.
Customer and booking information
Kiinora may process information needed to provide booking and customer-management features, including names, contact details, appointment details, service preferences, notes, form responses, booking history, and communications associated with a business using Kiinora.
Payment and transaction information
When payment features are used, payment processing may be handled by third-party payment providers. Kiinora may receive transaction references, payment status, amounts, and related records needed to operate the service, but we do not need to store your full payment-card number to provide Kiinora's normal payment workflows.
Device, usage, and security information
We may collect technical information such as IP address, browser or device information, timestamps, session information, log events, and usage data where reasonably necessary to operate, secure, debug, and improve Kiinora.
3. How Kiinora uses Google user data
Google user data received through Sign in with Google is used only to provide account authentication, account linking, account security, and related user-requested functionality.
Kiinora stores the Google account identifier and verified email address associated with your Kiinora account. Temporary OAuth state, nonce, and session information may also be processed during sign-in for security and then expire as part of the authentication flow.
We do not sell Google user data, use it for advertising, or use it to build advertising profiles. We do not transfer Google user data to third parties except where necessary to provide or secure Kiinora through service providers acting on our behalf, where required by law, or where you direct or authorize the transfer.
Kiinora's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy , including applicable Limited Use requirements.
4. How we use information
- Provide, operate, maintain, and secure Kiinora.
- Create and authenticate accounts and manage access permissions.
- Provide booking, scheduling, customer-management, communication, billing, and operational features.
- Process actions requested by businesses and their customers.
- Prevent fraud, abuse, unauthorized access, and security incidents.
- Diagnose problems, measure reliability, and improve product functionality and user experience.
- Comply with legal obligations and enforce applicable agreements.
5. How information may be shared
We may share information only as reasonably necessary with:
- the business that controls the relevant Kiinora workspace and authorized members of its team;
- service providers that support hosting, authentication, communications, payments, security, analytics, or other infrastructure used to operate Kiinora;
- third parties you intentionally connect to Kiinora or ask Kiinora to interact with;
- professional advisers, authorities, or other parties where disclosure is required by law or reasonably necessary to protect rights, safety, and security; and
- a successor entity in connection with a merger, acquisition, financing, reorganization, or sale of all or part of the business, subject to appropriate protections.
We do not sell personal information as a data broker and do not sell Google user data.
6. Data retention
We retain information for as long as reasonably necessary to provide Kiinora, maintain business and booking records, secure the service, resolve disputes, meet contractual obligations, and comply with applicable law. Retention periods can vary by data type and by the requirements of the business using Kiinora.
When an account or data is deleted, we will delete or de-identify information within a reasonable period unless continued retention is required for legitimate security, accounting, legal, fraud-prevention, or backup purposes.
7. Security
We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. No internet service can guarantee absolute security, so users should also protect their credentials and promptly report suspected unauthorized access.
8. Your choices and rights
Depending on where you live, you may have rights to request access to, correction of, deletion of, or restriction of certain personal information, or to object to certain processing. Business customers may also manage much of their account and operational information directly in Kiinora.
You can stop using Google Sign-In by using another available authentication method where supported and by managing connected-app access in your Google Account. Revoking Google access does not automatically delete an existing Kiinora account or records that Kiinora is otherwise permitted or required to retain.
Privacy and data-deletion requests can be submitted through the support contact available in Kiinora. If the information is controlled by a business using Kiinora, we may direct the request to that business where appropriate.
9. International processing
Kiinora and its service providers may process information in countries other than the country where you live or where a business operates. Where required, we use appropriate safeguards for international transfers of personal information.
10. Children
Kiinora is designed for businesses and their customers and is not intended for children to create independent business accounts. Businesses using Kiinora are responsible for ensuring that any collection of information about minors through their services complies with applicable law and obtains any required consent.
11. Changes to this policy
We may update this Privacy Policy as Kiinora evolves, legal requirements change, or our data practices change. The date at the top of this page shows when the policy was last updated. Material changes will be communicated where required by applicable law.
12. Contact
For questions about this Privacy Policy, Google user data, or a request concerning your personal information, please use the support contact provided through Kiinora. We will route privacy requests to the appropriate team or, where relevant, to the business that controls the applicable workspace.