Privacy Policy

This Privacy Policy explains how Kiwiq (“we”, “us”) collects, uses and protects information — both for people who create a Kiwiq account, and for visitors to websites that use the Kiwiq tracking snippet.

Kiwiq acts in two different roles depending on the data in question. For your Kiwiq account, we are the data controller. For analytics events collected through the Kiwiq snippet on a customer's website, we act as a data processor on that customer's behalf — the website owner is the controller for their own visitors. See “If you're a Kiwiq customer” near the end of this page for what that means in practice.

If you create a Kiwiq account, we collect your email address, a securely hashed version of your password (we never store or can see your actual password), and the workspace name you choose. This automatically creates a project with a public API key so you can start tracking events right away.

Kiwiq's own website uses local storage on your device for two things: keeping you signed in (a security token), and remembering your cookie preference choice. We treat local storage the same as cookies for consent purposes — both are covered by the same banner and preference center.

Beyond these two necessary items, our marketing site does not currently set additional cookies or use third-party analytics or marketing trackers. The “functional”, “analytics” and “marketing” categories in our cookie preferences exist for services we may add in the future — turning them on today has no additional effect.

If you visit a website that has installed the Kiwiq tracking snippet, and that website's owner has configured tracking for a given element, Kiwiq's collector receives: the type of interaction (impression, click, scroll, hover, or submit), the CSS selector of the tracked element, the page path, the referring page (if any), a general device category (desktop, mobile, or tablet, derived from your browser's user-agent string), and a one-way hashed identifier derived from your IP address, the project, and the current date.

This hash rotates every day and cannot be reversed to recover your IP address — it exists only to count unique visitors per day without storing your IP itself. We do not use cookies for this tracking, and the snippet does not build a cross-site or long-term profile of you.

For our own account holders, we process your data to perform our contract with you (Art. 6(1)(b) GDPR) — providing the dashboard and the service you signed up for.

For analytics events collected on a customer's website, the applicable legal basis is determined by that website's own privacy policy and consent mechanisms. Kiwiq processes this data solely as instructed by, and on behalf of, that website's owner.

We use infrastructure providers to run Kiwiq, who process data on our behalf under their own data processing terms: Vercel (hosts our website and dashboard) and Render (hosts our backend API and database).

We do not sell your data, and we do not share it with third parties for their own marketing purposes.

We keep account data for as long as your account is active. Analytics events are retained for as long as the associated project exists. You can request deletion at any time — see “Your rights” below.

Depending on your location, you may have the right to access, correct, delete, restrict, or receive a copy of your personal data, and to object to certain processing. To exercise any of these rights, contact us using the details below.

If you believe your data has been processed unlawfully, you also have the right to lodge a complaint with your local data protection authority.

Kiwiq is not directed at children, and we do not knowingly collect personal data from children under 16.

Our infrastructure providers may process data in locations outside your own country, including outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as standard contractual clauses.

We may update this policy as Kiwiq evolves. We'll update the date at the top of this page whenever we do.

If you're using Kiwiq to track elements on your own website, you are the data controller for your own visitors under data protection law — Kiwiq only processes that data as instructed by you. Make sure your own privacy policy covers your use of Kiwiq and that you have a valid legal basis for tracking your visitors.

Questions about this policy or your data? Reach us at karall.marcel@gmail.com.

Kiwiq, Moissigasse 19, 1220 Vienna, Austria.