Privacy Policy

Adaptation date: 31 October 2026. Status: draft. Statements about machine identifiers, telemetry, payment processing, storage, and retention have not been verified against the shipped application and the services that will actually run. Do not rely on this text until the owner and legal counsel approve it.

This draft is from Kiviki Group ("Company," "we," "us," or "our") and is about KP CAD Viewer Pro and the website at https://kivikigroup.com. HRNexus is a separate product. This draft does not describe HRNexus data practices.

1. Introduction

This Privacy Policy is proposed wording. It explains what the earlier draft claimed about information collected by the desktop application, and what this marketing website actually does today. Where the two differ, section 8 describes the website as built. Sections 2 through 7 and 9 keep the earlier desktop claims and mark them unverified.

2. Information the earlier draft listed

Unverified against the shipped build.

2.1 Information you provide

• License key. When you purchase a license, a license key is part of the transaction.
• Email address. For license delivery, support, and updates, if those messages are sent.
• Payment information. Processed by our payment processor (e.g. Lemon Squeezy). This draft says we do not store credit card details. The processor name is an example, not a guarantee. No processor is connected on this website yet.

2.2 Information the earlier draft said is collected automatically

• Machine fingerprint. A cryptographic hash the earlier draft derived from:
  • Windows Machine GUID (registry key: HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid)
  • System volume serial number (C: drive)
  • Primary physical network adapter MAC address
• Software version. The version of KP CAD Viewer Pro you are running.
• Activation status. Whether the software is activated, in trial, or expired.

2.3 Support information

When you contact support, the earlier draft said we may collect your name and email address, software logs with your permission, and system information such as OS version, RAM, and GPU. The only published contact is hello@kivikigroup.com. This draft does not define a support process.

3. How that draft said information is used

This table is proposed wording. It is not a verified inventory.

4. What that draft said we do not collect

• Keystrokes or screen content. The earlier draft said we do not monitor your activity.
• Network traffic. The earlier draft said we do not inspect your internet usage.
• Personal documents. The earlier draft said we do not access your documents, photos, or other files.

5. Storage and security

Unverified technical statements from the earlier draft:

5.1 Local storage

• Machine fingerprints are stored locally on your computer in the license file (.kpcv).
• License activation status is stored in:
  • Windows Registry: HKEY_CURRENT_USER\SOFTWARE\KP CAD Viewer
  • File: %LOCALAPPDATA%\KP CAD Viewer\.kpcv_activation

Those paths are copied from the earlier draft. This adaptation does not invent new paths. Confirm them in the build before publication.

5.2 Server storage

• The earlier draft said we do not maintain a centralized database of customer hardware.
• The earlier draft said license keys are generated using a vendor secret and are not stored on our servers. If a payment processor (e.g. Lemon Squeezy) issues keys, that processor may store purchase and key records under its own policy. This draft does not confirm what Kiviki Group stores.
• The earlier draft said email addresses used for license delivery are stored securely and are not shared with third parties, except as section 6 allows.

5.3 Security measures named in the earlier draft

• License file signatures use HMAC-SHA256.
• Machine fingerprints are one-way hashes.
• Payment processing is handled by a processor that claims PCI-DSS compliance. Which processor, and which certification, is not confirmed here.

6. Sharing

The earlier draft said we do not sell, trade, or rent your personal information.

It allowed sharing with:

• A payment processor (e.g. Lemon Squeezy), to complete a transaction, if a purchase path exists. Earlier names Razorpay and Stripe are withdrawn pending review. They are not stated as the current processors.
• A host for this website or for software downloads, if one is used. See section 9.
• Legal authorities, if required by law or to protect our rights.

7. Your rights

Proposed wording. Depending on applicable law, you may have the right to:

• Access a copy of the personal data we hold about you.
• Rectification of inaccurate or incomplete data.
• Erasure of your personal data.
• Portability of your data in a structured format.
• Withdraw consent for marketing communications.

To ask for any of these, email hello@kivikigroup.com. This draft does not promise a response time. Counsel should map these rights to the statutes that actually apply.

8. This website

This section describes the Kiviki Group marketing site as published with this draft. It is not a claim about KP CAD Viewer Pro's desktop behavior.

• The site is static HTML, CSS, and JavaScript.
• Your language choice (English or French) is stored in the browser's localStorage under the key kiviki-lang. That value stays on your device. It is not a cookie, and this site does not receive it on a server.
• The site does not run an analytics service.
• The site does not set advertising cookies.
• The site does not embed third-party trackers.
• Typefaces (Fraunces and Source Sans 3) are files served with the site. The pages do not request fonts from Google or another font host.
• Trial download and Buy buttons on the KP CAD Viewer Pro page are placeholders. They do not send you to a checkout and they do not start a download.
• Links to hrnexus.kivikigroup.com leave this site. This policy does not cover that application.

The earlier draft said the website may use cookies for session management, analytics such as Google Analytics, and theme preferences. Those statements are withdrawn for this site. If a later version adds cookies or analytics, this policy has to be rewritten before it can take effect.

9. Third-party services

Nothing in this table is a statement that the service is already in use. It lists services the earlier draft or the current release notes named as possible, and where to read their policies.

10. Children

The earlier draft said KP CAD Viewer Pro is not intended for children under 16, and that we do not knowingly collect data from children. That stance is kept as proposed wording.

11. Changes

Proposed wording: we may update this policy, post changes on this website, and notify by email, and continued use after changes constitutes acceptance. That wording is not in effect. An approved policy needs its own notice rule from counsel.

12. Contact

Kiviki Group
Email: hello@kivikigroup.com
Website: https://kivikigroup.com
Bengaluru, Karnataka, India

The earlier draft used a "Data Protection Officer" heading and a placeholder email. This draft does not appoint a data protection officer and does not invent an address for one. Write to hello@kivikigroup.com.

13. Governing law

The earlier draft said this policy is governed by the laws of India, including:

• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Digital Personal Data Protection Act, 2023, to the extent it applies

Counsel should confirm which of these instruments apply, and whether any other law applies to customers outside India. The earlier phrase "when fully in force" is replaced with "to the extent it applies" so this draft does not guess the statute's status.

14. Adaptation notes

These notes are for review. They are not part of the policy.

• Company, product, contact, and website names are set to Kiviki Group, KP CAD Viewer Pro, hello@kivikigroup.com, and https://kivikigroup.com.
• "We do not collect your CAD files" is kept and still marked unverified against the build.
• Razorpay and Stripe are withdrawn as named processors. The draft says "our payment processor (e.g. Lemon Squeezy)".
• Registry paths, HMAC-SHA256, and the .kpcv file name are unchanged from the earlier draft and marked unverified. No new paths were added.
• Website cookies and Google Analytics claims are withdrawn for this static site. Section 8 matches the site as built: localStorage language preference, self-hosted fonts, no analytics.
• A named data protection officer was not invented.

Related drafts: Terms of Service, Refund Policy.