Cookie Policy
Effective 1 October 2026
The short version. Krivollo uses cookies and browser storage only to sign you in, keep the service secure and remember display preferences you choose. We do not use analytics cookies, advertising cookies, tracking pixels on our website, or cross-site tracking. Because everything we set is necessary or a preference you made, we do not show a cookie consent banner. If that ever changes, we will ask before setting anything non-essential.
1. What cookies and browser storage are
Cookies are small text files a website stores in your browser. “Local storage” and “session storage” are similar browser features that keep small pieces of information on your device. We refer to all of these as cookies in this policy.
2. Our website
Our public website sets no cookies. It keeps two preferences in your browser’s local storage:
| Name | Purpose | Kept for |
|---|---|---|
| krivollo-mkt-theme | Remembers whether you chose light or dark mode | Until you clear it |
| krivollo:nora-voice | Remembers whether the website assistant should speak its replies | Until you clear it |
Our fonts are served from our own website, not from a third-party font service. The website assistant sends the messages you type to our servers and our AI provider to answer you (see the Privacy Policy) but does not set cookies.
3. The Krivollo app — strictly necessary
These are needed for Krivollo to work and cannot be switched off:
| Name | Purpose | Kept for |
|---|---|---|
| __Secure-authjs.session-token (authjs.session-token in development) | Keeps you signed in. Encrypted and inaccessible to page scripts (HttpOnly, Secure). | Up to 30 days; you are also signed out automatically after a period of inactivity your workspace sets |
| authjs.csrf-token, authjs.callback-url and Google sign-in state/PKCE/nonce cookies | Protect sign-in against forgery and return you to the right page | Session / minutes |
| cdnc_oauth_<provider> | Protects the connection flow when you connect an integration | 10 minutes |
| __cadence_imp | Records when an administrator is acting on another user's behalf, so every action is logged under both names | 1 hour (30 minutes for a member) |
| krivollo:last-activity (local storage) | Times automatic sign-out after inactivity | Until sign-out |
| krivollo:auto-placed:<call> and similar (session storage) | Stops a call being placed twice when a page reloads | Until the tab closes |
4. The Krivollo app — preferences
These remember choices you make about how Krivollo looks and behaves on your device — for example your theme (cadence-theme), whether the sidebar is collapsed, the Lead Desk layout and focus mode (the lead-desk-surface and lead-desk-focus cookies, kept for one year), your assistant voice settings, and which guided tours you have dismissed. They are stored as local storage entries beginning krivollo:, lead-desk: or kv-.
They are not used to track you and are never sent to third parties. Clearing your browser storage resets them to the defaults.
5. Offline support and notifications
- Where a workspace enables the installable mobile app, a service worker keeps copies of pages and files on your device so Krivollo loads quickly and works on a poor connection. On a shared device, sign out and clear site data when you finish.
- If you turn on push notifications, your browser creates a subscription with its push service (Google, Apple or Mozilla, depending on your browser), which we store so we can send you the alerts you chose. You can turn these off in Krivollo or your browser at any time.
6. Third-party content inside the app
Some features show content from other services, which may set their own cookies or receive your IP address when that content loads:
- Video: YouTube (in privacy-enhanced mode) and Vimeo, where a workspace embeds training or meeting videos.
- Meetings and calling: Zoom, Aircall, JustCall and Twilio, where a workspace connects them.
- Google: the Google file picker when you choose a spreadsheet, and Google Fonts for workspace branding fonts.
These providers’ own cookie and privacy policies apply to that content. We do not use them to track you for advertising.
7. Managing cookies
You can block or delete cookies in your browser settings. If you block the strictly necessary cookies, you will not be able to sign in. Questions: privacy@krivollo.com.
Krivollo is operated by [Krivollo legal entity name] (ABN [ABN to be confirmed]), [Registered business address, Victoria, Australia]. Questions about this document: privacy@krivollo.com.