Privacy Policy

TNZ Productions LLC is a software development company incorporated in Washington State. We design, build, and operate technology products for businesses and individuals. Our registered address is in Spokane, Washington. You can reach us at support@tnzproductions.com.

We collect information you provide directly to us and information generated through your use of our products:

• Account Information: Name, business name, email address, phone number, and address provided during registration or onboarding.
• Financial Information: Bank account details and identity verification documents required for payment processing (handled by Stripe on our behalf).
• Transaction Data: Payment amounts, timestamps, item descriptions, and payment method details (last four digits, card type).
• Email Data: For KovaMail users, the content of emails sent and received through our platform, including attachments.
• Device Information: Device type, operating system, app version, and unique device identifiers.
• Usage Data: Features accessed, session duration, and interaction logs used to improve our products.
• Location Data: With your permission, approximate location may be used to verify transaction context and prevent fraud.

We use the information we collect to:

• Provide, operate, and improve our products and services.
• Process and settle payment transactions on your behalf.
• Create and manage your account across TNZ products.
• Send transactional notifications, receipts, and account updates.
• Detect, prevent, and investigate fraud and unauthorized activity.
• Comply with applicable laws, regulations, and legal obligations.
• Respond to your support requests and inquiries.
• Analyze aggregate, de-identified usage trends to improve our products.

KovaPay uses Stripe as its payment processing infrastructure. When you process payments or connect a bank account, your financial information is transmitted directly to Stripe and governed by Stripe's own Privacy Policy and Terms of Service. TNZ Productions does not store full card numbers, CVV codes, or complete bank account numbers on our servers.

Stripe is a PCI-DSS Level 1 certified payment processor. All payment card data is handled in compliance with applicable security standards.

For KovaMail users, we store and process email content on our servers hosted on AWS. This includes email bodies, headers, attachments, and metadata. We do not read, scan, or analyze the content of your emails for advertising purposes. Email content is accessed only when necessary to provide the service, troubleshoot technical issues, or comply with legal obligations.

Domain-verified KovaMail accounts allow businesses to send and receive email from their own domains. DNS verification records are used solely to confirm domain ownership.

We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:

• Payment Processors: Stripe and associated banking partners, solely for processing transactions.
• Cloud Infrastructure: AWS, which hosts our servers under strict data processing agreements.
• Legal Requirements: When required by law, court order, or government authority.
• Fraud Prevention: With fraud detection services to protect our users.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice.
• Your Consent: Any other sharing only occurs with your explicit permission.

We retain your account information and transaction records for as long as your account is active and for seven (7) years following account closure, in compliance with financial recordkeeping requirements.

You may request deletion of your account at any time. Upon deletion, we will remove or anonymize your personal information except where retention is required by law or for legitimate business purposes such as fraud prevention or dispute resolution.

We implement industry-standard security measures to protect your information, including:

• TLS encryption for all data in transit between your device and our servers.
• Encrypted storage for sensitive data at rest on AWS infrastructure.
• Biometric and PIN-based app authentication where applicable.
• Cloudflare protection against DDoS and other network-level threats.
• Regular security assessments and monitoring.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal obligations.
• Portability: Request your data in a portable, machine-readable format.
• Opt-Out: Opt out of non-essential communications at any time.

To exercise any of these rights, contact us at support@tnzproductions.com.

Our products are intended for use by adults and businesses. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that a minor has provided us with personal information, we will promptly delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or in-app notification at least 14 days before the changes take effect. Your continued use of our products after the effective date constitutes acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please reach out: