Privacy Policy

This policy explains how Kuvell processes data about people (for example company representatives, recommenders, invitees, and collaboration contacts when that feature is used).

The platform owner is Aleksandar Nikolić PR Biro za geodetski inženjering A-SURVEY Beograd, Petefijeva 47, Belgrade (Čukarica), Republic of Serbia, company no. 63586684, TIN 108629915. Privacy contact: contact@kuvell.com.

Information about a company alone (name, registration number) is not necessarily personal data. Serbian personal data protection law applies, and the GDPR or other rules where they apply.

• account data (email, language, profile name if you enter one);
• your link to a company and your role;
• company information you enter;
• recommendation and invite data (including name and email where needed);
• optional collaboration contact on a recommendation request (name, job function, business email) when a company chooses to provide it;
• billing data if you pay for a subscription;
• technical data needed to run the site (for example session and security).

We do not ask for special categories of sensitive personal data for these purposes. Do not put that kind of information in free-text fields.

We use personal data to provide the service: account, profile, recommendations, company lookup, Partner Discovery, billing where applicable, security, and legal duties (for example invoices).

Depending on the activity and applicable law, processing may rely on contract (or steps before a contract), legitimate interests in a B2B context, legal obligation, or - where required - a specific confirmation or consent (for example for public display of a personal name).

Accepting the Terms of Use is not blanket consent to every processing described here.

We show a recommender’s personal name publicly with a recommendation only if that person confirmed that choice in the flow. Otherwise those views use the company name.

Hiding a name does not always mean full anonymity - role, company, or recommendation text may still identify someone.

Email is not meant for public display on the profile.

Technical signals such as Email Confirmed, Business Domain Matched, or Company Confirmed have limited meanings. They are not a legal confirmation of identity or a guarantee that every statement in a recommendation is true.

If you enter someone’s name and email for an invite or recommendation request, you must do so lawfully. We use that data to send the invite or request and provide the service.

A requesting company may optionally name a collaboration contact from a real engagement (name, function, business email - all together, or none). That company is responsible for the accuracy and lawfulness of those details. Kuvell shows them privately to the authorised recipient of that request (and to authorised company members / support when needed). They are not published, not used for reputation or Discovery scoring, and not emailed automatically to the contact person.

We keep personal data only while there is a purpose and a lawful basis, including mandatory legal periods where they apply.

Company-to-company recommendation history may be kept for a long time under our adopted business retention policy - planned maximum up to 20 years, with periodic checks that retention is still justified. This is a planned maximum, not a promise that every record is kept for exactly 20 years.

Personal data (name, email) is not kept automatically for 20 years - only while there is a basis, then deleted or anonymised where possible, while company-to-company history may remain where lawful.

Billing and tax records follow applicable legal periods.

We process data ourselves. We use trusted providers to run the platform (database and login, email delivery, app hosting) under processing arrangements. We do not sell personal data for marketing.

Some processing may occur outside Serbia / the EU (for example transactional email storage in the US). The primary database is in the EU (Frankfurt). We do not claim all data always stays in one country. Where required, transfers rely on recognised safeguards. You may ask us for current provider information.

Depending on applicable law, you may request access, correction, deletion, restriction, objection, and - where conditions are met - portability or withdrawal of a consent previously given.

Email contact@kuvell.com. We aim to respond within 30 days, or sooner if law requires. We may ask for reasonable identity checks.

Deleting personal data need not erase a company’s entire recommendation history.

Complaints: Serbia’s Commissioner for Information of Public Importance and Personal Data Protection; where GDPR applies, the competent EU authority.

We apply appropriate technical and organisational measures for the nature of the service. No internet service is completely risk-free. We handle incidents as required by law.

The service is not for people under 18.

We publish changes with a new version and date. For material changes we notify users when required.