Kev

Privacy Policy

Last updated: July 20, 2026

Kev is a relationship marketing CRM operated by ChangeMastr FZ-LLC (United Arab Emirates). This policy explains what we collect, why, and who we share it with. We keep it plain and current: when we add or remove a sub-processor, we update this page.

Who we are

ChangeMastr FZ-LLC, United Arab Emirates. Contact: service@changemastr.com.

What Kev does

Kev is an AI system that manages a business's marketing relationships: customer conversations across connected channels (WhatsApp, Telegram, email), contact and lead management, marketing content creation and scheduling, appointment booking, and marketing analytics. AI-generated outbound messages are reviewed by the business owner before sending, unless the owner has explicitly enabled direct sending for a specific channel.

What we collect

  • Account data: name, email, authentication identifiers, billing details.
  • Contact and conversation data: contacts, leads, messages, media, notes, calendar events, and analytics the customer's business processes through Kev.
  • Usage data: logs, device and browser metadata, feature usage, error diagnostics.

Your customers' data

When a business uses Kev to communicate with its own customers, that customer data is processed by us on the business's behalf. The business is the controller of that data; ChangeMastr FZ-LLC is the processor.

Purpose limitation

We use data to operate the product the customer signed up for: routing messages, generating and scheduling content, syncing connected accounts, producing analytics, billing, support, and security. We do not sell personal data, and we do not use customer content to train third-party foundation models.

Sub-processors

We share data with the following categories of sub-processors. Data is shared with a given processor only when the relevant feature is used or connected. This list evolves as features are added, removed, or connected; the current list lives on this page.

AI model routing

  • OpenRouter: routes prompts to model providers, including Anthropic and others.

Hosting, database, storage

  • Lovable: application hosting.
  • Supabase: PostgreSQL database and object storage.
  • Railway: application/service hosting.

Payments

  • Stripe: subscription billing and payment processing.

Messaging channels

  • Meta Platforms: WhatsApp Business API, Instagram, and Meta advertising APIs.
  • Telegram: Telegram messaging.
  • Amazon Web Services (SES): transactional and marketing email delivery.

Google services (customer-connected)

  • Google Analytics, Google Search Console, Google Ads, Google Calendar / Meet: used only when the customer connects their Google account.

Marketing data

  • DataForSEO: SEO and marketing data.

Research and data aggregation

  • Monid: routes to research providers including Tikhub, Apify, Exa, Akta, and Apollo.

Image generation

  • Recraft: image generation.

Social publishing

  • Self-hosted Postiz: social publishing; when enabled, can proxy media-generation providers.

Website publishing (customer-connected)

  • WordPress / Novamira: used only when the customer connects their site.

Document OCR

  • OCR.space: optical character recognition for uploaded documents.

Code and skill content hosting

  • GitHub: hosting of code and skill content.

Retention

We retain account and tenant data for as long as the account is active. On deletion (see below), we remove account data, tenant data, conversations, and stored media from our systems within 30 days, except where we are required by law to retain records (e.g. tax and payment records). Backups are purged on their normal rotation.

Data deletion

To request deletion of your account and associated data, see Data Deletion.

Security

Data is encrypted in transit. Access to production systems is restricted to authorised personnel. Report suspected vulnerabilities to service@changemastr.com.

Contact

Questions or requests: service@changemastr.com.