Privacy Policy

Optional website measurement

We count visits to selected public pages, public link clicks, and new Kivo account creation and email confirmation. The aggregate measurement report stores daily totals with broad, allowlisted campaign and source categories. It does not store IP addresses, device fingerprints, full URLs, form contents, UTM content or term values, or household activity. Hosting and security providers may separately process operational logs.

Potent also uses a first-party first-touch attribution cookie for up to 30 days so a later support request or Kivo signup can be connected to the campaign that brought the visitor to Potent. It may contain UTM source, medium, campaign and content values, the public landing path, and only the hostname of an external referrer, never the full referring URL. UTM term is not retained in this browser cookie. Potent-controlled campaign links must not place names, email addresses, account identifiers, or other sensitive information in UTM values. Before aggregate measurement is stored, this attribution is reduced to a broad source and allowlisted campaign category.

To connect a Kivo signup to email confirmation, a private pending record temporarily links the account ID to its broad source and campaign category. It is removed on confirmation; stale pending records over 30 days and aggregate totals over 90 days are removed on subsequent collection. The report excludes expired records. Existing service-request records have their separate business retention described below.

We honor Do Not Track and Global Privacy Control and offer the browser choice below. Opting out removes the first-party attribution cookie used by this measurement flow and does not prevent use of Potent or Kivo.

Information we collect

When you contact Potent Technology or submit a support request, we may collect information such as your name, email address, phone number, preferred contact method, service location, device or system details, issue descriptions, attachments, service approvals, and other information you choose to provide.

How we use information

We use customer information to review and respond to support requests, diagnose and perform authorized work, communicate about service, document approvals and results, prepare service records and invoices, support warranty or follow-up work, and operate and improve Potent Technology.

PotentONE Auctions participants

When an adult participates in a PotentONE auction as a bidder, seller, or donor, Potent may process the name supplied during verification, the email address used to verify and contact the participant, a system-generated public bidder alias, auction or seller-submission records, private uploaded item photos before organizer approval, accepted bid history and timestamps, winner/payment/pickup workflow status, short-lived verification and session records, and bounded support or audit records.

Potent uses this information to verify participants, protect bidding integrity, operate bidding and seller intake, let the named organizer review submitted items, determine authoritative auction results, send transactional event messages such as verification, outbid, winner, payment, or pickup notices, resolve support or reconciliation questions, and secure the service. Participation does not enroll a person in unrelated Potent or organizer marketing.

Public auction pages may show approved item information, public prices and close state, and a system-generated bidder alias where the product uses one. They do not intentionally expose another participant's email address, phone number, verification or session data, internal participant identifier, private reserve, pending donor photos, or provider credentials.

The named event organizer receives participant information only for an event-operational purpose, such as seller contact needed to manage a submitted item, winner contact needed for payment or pickup, or bounded support evidence. PotentONE does not provide a general downloadable losing-bidder email directory for the first pilot. Organizers are responsible for using information they receive only for the event and their own lawful recordkeeping.

Potent's hosting, database/storage, and transactional email providers may process Auction information as needed to operate the service. For the first pilot, PotentONE records the organizer's external payment and pickup status but does not collect or process the winning card payment itself.

Auction verification challenges are removed on a bounded cleanup schedule after seven days, and expired participant sessions are removed after 30 days. A verification-only identity with no bid, seller submission, fulfillment obligation, or security hold may have its contact redacted after 30 days. For a real auction participant, Potent's first-pilot policy is to retain mutable participant contact for up to 180 days after the latest associated auction closes, unless an unresolved fulfillment, support, dispute, security, contractual, or legal need requires longer. After that operational window, Potent may redact the participant's name/contact while preserving the durable public alias, accepted bid ledger, final result, and bounded audit facts needed to keep the event record coherent.

Participants may ask Potent or the organizer to correct inaccurate mutable contact information. Accepted bids, final auction outcomes, and bounded audit/business records are not rewritten merely to erase historical event facts. Synthetic pilot/test identities and media are cleaned after controlled test evidence is captured.

Customer devices and files

Service may require access to files, settings, accounts, or other information stored on a customer device. Potent Technology limits access to what is reasonably necessary to perform the authorized work. We do not intentionally browse unrelated personal content.

Data transfer, backup, or recovery work may require temporary copies of customer data. Temporary copies created solely to perform the requested service are removed from Potent-controlled storage when they are no longer needed, unless the customer has authorized continued retention or the record is otherwise needed for a legitimate business or legal purpose.

Passwords, PINs, recovery keys, and MFA

Potent Technology prefers customer-entered credentials or temporary credentials created specifically for service. We do not intentionally store passwords, device PINs, MFA codes, recovery keys, private keys, or authentication tokens in normal tickets, invoices, or general service notes.

If a permanent credential must be shared to complete authorized work, it should be changed after service. Customers should avoid sending sensitive credentials through ordinary support requests unless Potent specifically directs them to an appropriate method.

Photos, screenshots, and attachments

Customers may provide photos, screenshots, logs, or other files to help explain an issue. Potent Technology may also create limited diagnostic screenshots or service records when useful. Unrelated personal information should be cropped, redacted, or omitted when practical.

Remote support

Remote-control sessions are started only with customer authorization. One-time support normally uses session-based access that ends when the session is complete. Persistent or unattended remote access is used only when it is appropriate for an approved ongoing-support relationship.

Service providers and AI-assisted tools

Potent Technology may use third-party providers to operate its website, communications, hosting, support systems, payment or business tools. We may also use AI-assisted tools to help draft customer communications, service notes, summaries, or other administrative material.

Potent Technology's operating rule is to provide only the information reasonably needed for the task and not intentionally submit passwords, MFA codes, recovery keys, private customer file contents, or unrelated sensitive personal information to an AI-assisted drafting tool.

Information sharing

Potent Technology does not sell customer personal information. Information may be shared with service providers when reasonably necessary to operate the business or deliver an authorized service, or when disclosure is required by law or needed to protect Potent Technology, a customer, or another person.

Retention

Potent Technology keeps service and business records for as long as reasonably needed for customer history, service follow-up, warranty administration, accounting, tax, security, or legal purposes. Customer credentials are not intended to become part of the permanent service history. Product-specific bounded retention rules, including the PotentONE Auctions participant-contact policy above, apply where stated.

Security

We use reasonable administrative and technical measures to protect information handled through Potent Technology, including limiting unnecessary access and keeping private customer and business records out of public repositories. No internet-based system or storage method can guarantee absolute security.

Questions or corrections

Customers and Auction participants may contact Potent Technology through the support system with questions about this policy or to request correction of inaccurate contact or service information. Some records may need to be retained for accounting, tax, security, contractual, auction-integrity, or legal purposes.

Changes to this policy

This policy may be updated as Potent Technology's services, systems, or business practices evolve. The current version will be posted on this website with its updated date.

Contact

Questions about this policy can be submitted through Potent Technology's support system.