Krevos — Privacy Policy

Version of October 27, 2026 — prepared for the invitation launch (Thu Oct 29, 2026). Supersedes the October 25 draft.

The short version

Your books are yours. We hold them so the app works. We never sell your data, never use it for advertising, and never use it to train AI models. You can export everything at any time. If you choose to connect a bank or other third-party account, that connection runs through the provider you connect with, under their privacy policy — connecting is always your choice, and you can disconnect at any time.

1. What the app holds

• Account details: your name, email address, and a securely hashed password (we never store your actual password). If you turn on two-factor authentication, the settings that make it work. We also keep a record of when you accepted the Terms of Service and this policy.
• Your workspace data: the financial records, transactions, accounts, tasks, projects, comments, and files you and your invited members enter.
• Bank-connection data — only if you connect an account: the account details you authorize us to retrieve through our connection provider, such as institution and account names, masked account numbers, balances, and transactions. We never receive and never store your bank password — you enter it with the connection provider or your bank, not with us.
• Audit logs: a record of who did what in a workspace and when — including actions taken through an integration key an Owner chooses to create. Audit logs are part of the product: they are how an Owner can see, and prove, what happened in their books.

2. Where it lives

• Your data lives on Alvarez Solutions' own server, not scattered across advertising or analytics platforms.
• The server is protected by encrypted connections, hashed passwords, account lockouts against repeated failed sign-ins, and automatic sign-out after inactivity (a limit each user can set).
• Backups are encrypted and kept on a short rotation, then automatically aged out. Backups exist so your data can be restored if the server fails — for nothing else.

3. What we never do

• We never sell your personal or business data.
• Mobile information: if you choose to receive text-message notifications, we use your mobile number only to send them. We do not share, sell, or disclose mobile information or text-messaging consent to third parties for their marketing purposes.
• We never use your data for advertising — ours or anyone else's.
• We never use your data to train AI models.
• We do not share your data with third parties except the infrastructure and service providers required to run the service (such as the server host, and — only when you choose to connect — the bank-connection provider), and only to the extent the service needs to operate.

4. Third-party connections are your choice

• If you connect a bank or any other third-party service, the connection is between you and that provider. Their privacy policy — not this one — governs what they collect and how they handle your credentials and data on their side. We are not responsible for a third-party provider's practices.
• We receive from a connection only the data you authorized, and we hold it as part of your workspace data under this policy.
• Disconnect anytime in the app: disconnecting revokes the connection and stops future retrieval. Data already brought into your books stays until you delete it, like any record you entered.

5. Who can access your workspace

• Your members, per their roles. Workspace members and guests see only what the Owner's roles and settings allow. One workspace cannot see another workspace's data.
• Alvarez Solutions, only to operate and help. If you ask for support or something breaks, we may need to look at the affected workspace to fix it. The product's audit trail records activity in the workspace, and an Owner can review it.
• An integration key, only if the Owner creates one. An Owner may create a scoped key (for example, for Nino) that can read the books and board and update board items — nothing more. It cannot delete data or manage users, its actions are written to the audit log under its own name, and the Owner can revoke it at any time, effective immediately.

6. Your rights

• Export anytime. You can export your full data from inside the app, at any time, on any plan, including an ended trial. No permission needed.
• Deletion on request. Email info@azbizsupport.com and ask us to delete your workspace. Deleting a workspace permanently removes its books, board, and files, and the accounts in it. We will confirm the request with the workspace Owner before acting, and we will tell you when it is done. Encrypted backups containing the data age out on the normal backup rotation afterward.
• Correct your information. Account details can be updated in the app, or ask us and we will help.

7. Cookies

The app uses cookies only to keep you signed in securely. There are no advertising cookies and no third-party tracking cookies.

8. Children

Krevos is a business and household finance tool for adults. It is not directed to children under 13, and we do not knowingly hold their data.

9. Changes to this policy

If this policy changes in a way that matters, we will give notice in the app or by the contact information on file before the change takes effect.

Contact

Questions about your data or this policy: info@azbizsupport.com (Alvarez Solutions, Inc.).