Privacy Policy
Last updated: June 18, 2026
1. Overview & Platform Purpose
Kovalba, available at kovalba.com , is an AI readiness, initiative planning, and AI enablement platform operated by Optimaken.
The purpose of Kovalba is to help professionals, teams, and organizations evaluate their AI enablement readiness, understand capability gaps, receive structured recommendations, and plan meaningful AI initiatives. This Privacy Policy explains how we collect, use, store, protect, disclose, and delete personal information and assessment data when you use Kovalba.
By accessing or using Kovalba, creating an account, signing in with Google, or completing an assessment, you acknowledge that your information will be handled according to this Privacy Policy.
2. Information We Collect
We collect only the information required to create your account, operate the platform, generate assessment results, provide recommendations, maintain security, and improve the service.
A. Authentication & Account Data
- Account details: Your name, email address, account identifier, login method, and basic profile information required to create and maintain your account.
- Google Sign-In information: If you sign in using Google, we may receive your basic Google profile details such as your name, email address, profile image, and Google account identifier.
- Session data: Information required to keep you logged in securely, prevent unauthorized access, and maintain account integrity.
B. Assessment & Professional Context Data
- Assessment responses: Answers, ratings, selections, written inputs, comments, and feedback submitted during AI readiness or capability assessments.
- Professional context: Information you voluntarily provide, such as your role, industry, seniority level, country, organization size, department, AI tool usage frequency, learning goals, and capability areas.
- Generated recommendations: AI enablement scores, readiness levels, suggested actions, learning paths, and capability improvement recommendations generated by the platform.
C. Technical, Usage & Security Data
- Browser type, device information, operating system, approximate location derived from IP address, pages visited, features used, timestamps, error logs, and session duration.
- Security logs used to detect misuse, prevent unauthorized access, diagnose technical problems, and protect the platform.
3. Google OAuth & Google Sign-In Data Usage
Kovalba uses Google Sign-In only to help users create and access their Kovalba accounts conveniently and securely. Google OAuth policies apply to applications that use OAuth 2.0, including OpenID Connect for authentication-only use cases. Kovalba is designed to use Google Sign-In for authentication, not to access private Gmail or Google Workspace content.
- Limited Google data: We only use basic identity information needed for authentication, such as your email address, name, profile image, and Google account ID.
- No Gmail access: Kovalba does not request, read, scan, store, send, modify, or delete your Gmail messages.
- No Google Drive access: Kovalba does not access your Google Drive files.
- No Google Calendar access: Kovalba does not access your Google Calendar events.
- No restricted Google scopes: Kovalba does not use restricted Google API scopes for account creation or sign-in.
- Purpose limitation: Google Sign-In data is used only to create your Kovalba account, authenticate you, protect account security, and personalize your account profile.
- No sale of Google user data: We do not sell, rent, trade, or transfer Google user data to external marketers, advertisers, data brokers, or unrelated third parties.
Kovalba’s use of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.
4. How We Use Collected Information
We use collected information only for legitimate platform, security, assessment, communication, and service improvement purposes.
- Account creation and login: To create, authenticate, and manage user accounts.
- Assessment processing: To calculate AI readiness scores, capability levels, strengths, weaknesses, and recommendation areas.
- Personalized recommendations: To provide tailored guidance, improvement actions, training suggestions, and AI enablement plans.
- Platform communication: To send important account, security, service, policy, or administrative notices.
- Product improvement: To improve platform features, usability, scoring quality, recommendations, reporting, and reliability.
- Security and fraud prevention: To detect abuse, prevent unauthorized access, investigate suspicious behavior, and enforce our terms.
- Aggregated analytics: To understand broad AI readiness trends across industries, roles, regions, or organizational categories without revealing individual identities.
5. Assessment Benchmarking, Aggregation & Anonymization
Kovalba may use assessment data to generate anonymous and aggregated insights about AI readiness trends. These insights may help users and organizations understand broader patterns in AI adoption, capability maturity, and enablement needs.
Public reports, benchmarks, dashboards, or industry-level summaries, if provided, are designed to use aggregated and anonymized information. For example, Kovalba may show average readiness levels for a broad industry segment, but not the identifiable results of a specific individual user.
We take reasonable steps to avoid publishing data sets that would allow a person to reconstruct or identify an individual user from aggregated reports.
6. Data Sharing & Third-Party Disclosure
We do not sell, trade, rent, or monetize your personal information.
We may share limited information only when necessary for the operation, security, compliance, or legal protection of Kovalba.
- Service providers: We may use trusted service providers for hosting, database infrastructure, authentication, analytics, email delivery, monitoring, or security. These providers may process data only as needed to support Kovalba.
- Legal compliance: We may disclose information if required by law, regulation, legal process, court order, or government request.
- Security protection: We may disclose information when necessary to investigate fraud, abuse, security incidents, policy violations, or threats to the rights and safety of users or the platform.
- Business transfer: If Kovalba or Optimaken is involved in a merger, acquisition, restructuring, or sale of assets, user information may be transferred as part of that transaction, subject to appropriate safeguards.
7. Data Security Measures
We apply reasonable administrative, technical, and organizational safeguards designed to protect your information against unauthorized access, loss, misuse, alteration, or disclosure.
- Use of encrypted HTTPS/TLS connections.
- Access controls for administrative and system accounts.
- Secure handling of authentication credentials.
- Monitoring and logging for suspicious activity.
- Reasonable database and infrastructure safeguards.
- Periodic review of access permissions where applicable.
No internet-based platform can guarantee absolute security. However, we work to maintain reasonable safeguards appropriate for the nature of the information we process.
8. Children’s Privacy & Strict Under-18 Restriction
Kovalba is a professional AI enablement, AI readiness, and strategic planning platform intended only for adults, professionals, organizations, consultants, and business users.
Individuals under the age of 18 are not permitted to create an account, sign in using Google, complete assessments, submit personal information, upload information, request recommendations, or otherwise use Kovalba.
A. No Services for Minors
Kovalba is not designed for children, students under 18, or minors. Our services are focused on workplace readiness, professional capability development, organizational AI adoption, and business transformation. We do not knowingly allow minors to participate in these services.
B. No Knowing Collection from Children
We do not knowingly collect names, email addresses, profile details, assessment answers, professional demographics, or other personal information from individuals under 18. If a minor attempts to use Google Sign-In or otherwise creates an account, such use is unauthorized and violates our age restriction.
C. Action if a Minor Creates an Account
If we discover that a person under 18 has created an account, submitted an assessment, or provided personal information, we will take reasonable steps to delete the account and remove the associated personal information from active systems, unless we are legally required to retain certain limited records.
D. Parent or Guardian Contact
If you are a parent, guardian, teacher, organization representative, or other responsible adult and believe that a person under 18 has created an account or submitted information to Kovalba, please contact us immediately at [email protected]. Please provide enough information for us to locate the relevant account or data, such as the email address used to register.
E. No Targeted Marketing to Minors
Kovalba does not knowingly target minors with advertising, marketing campaigns, assessments, recommendations, or educational content. Our platform is intended for adult professional and organizational use only.
9. Data Retention, User Rights & Account Deletion
We retain personal information and assessment data for as long as your account remains active or as long as reasonably necessary to provide the platform, maintain records, comply with legal obligations, resolve disputes, enforce agreements, and protect platform security.
You may request access to, correction of, or deletion of your personal information by contacting us. Depending on your location, you may have additional legal rights regarding your personal data.
Account deletion: If you want to delete your Kovalba account, assessment history, and associated personal data, contact us at [email protected]. We will take reasonable steps to process the request, subject to identity verification, security needs, legal retention obligations, backup retention cycles, and legitimate business requirements.
If your account is part of an organization, enterprise, or tenant-managed environment, deletion requests may require coordination with the relevant organization administrator.
10. Cookies, Analytics & Similar Technologies
Kovalba may use cookies, local storage, session tokens, and similar technologies to keep users signed in, secure sessions, remember preferences, analyze platform usage, and improve the user experience.
You may control cookies through your browser settings. However, disabling certain cookies or storage mechanisms may affect login, security, and platform functionality.
11. International Use & Data Processing
Kovalba may be accessed by users from different countries. Depending on where you are located, your information may be processed, stored, or transmitted in jurisdictions different from your country of residence.
By using Kovalba, you understand that your information may be processed where our infrastructure, service providers, or operational teams are located, subject to reasonable safeguards.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, security practices, or operational requirements. When we make material changes, we may update the “Last updated” date and, where appropriate, provide additional notice.
Continued use of Kovalba after an updated Privacy Policy is posted means you acknowledge the updated policy.
13. Contact & Privacy Requests
For questions about this Privacy Policy, Google Sign-In data, account deletion, children’s privacy concerns, security inquiries, or personal data requests, contact the Optimaken / Kovalba privacy team:
Official Privacy Desk