Security Policy
Last updated 2 September 2026
How Kyvara protects accounts, payments and customer data.
Data protection
All traffic is served over HTTPS. Passwords are stored as salted hashes by our authentication provider and are never visible to staff.
Access control
Customer records are protected by row-level security so each account can only reach its own data. Admin tools require a staff role.
Payments
We never store card details. UPI payments are verified using the reference number you submit.
Questions about this policy? Visit the help centre.