Kultivia is built on three core principles — verified data, protected identities, and secure infrastructure.
We never store your name or personal details after employment verification is complete. Your employer cannot see that you submitted a rating — ever. We use industry-standard encryption to protect all data in transit and at rest. Your submission is permanently separated from your identity before it is published.
Kultivia is designed from the ground up to make it impossible for employers to identify individual submitters. Ratings are only published once a department has a minimum of 5 verified submissions — making individual identification impossible. Employers see only aggregated, anonymous scores, never individual submissions or metadata.
When you sign in with LinkedIn we only access your name and email address to create your account. When you verify employment for a rating submission we access only your employment history to confirm you worked at the company you are rating. We never post to your profile, store your LinkedIn password, or access your connections, messages, or any other LinkedIn data.
All data transmitted between your browser and Kultivia is encrypted using HTTPS with TLS encryption. Personal verification data is deleted immediately after employment is confirmed. Stored data is encrypted at rest. We conduct regular security reviews and access controls.
Kultivia never stores your payment card details. All payments are processed by Stripe, which is PCI DSS Level 1 certified — the highest level of payment security certification available. Your card details go directly to Stripe and are never visible to Kultivia staff.
Kultivia supports strong password requirements and we monitor for suspicious login activity. Admin accounts require two-factor authentication. We log all access to your account data and alert you to any unusual activity.
Your culture analytics dashboard is accessible only to team members you explicitly authorize. Competitor companies cannot see your detailed scores or candidate activity data — they only see the same anonymized public scores that job seekers see.
Our nine-layer anti-gaming system — including verified employment confirmation, tenure minimums, anomaly detection, and human moderation — ensures that ratings on your profile reflect genuine employee experience. We monitor for coordinated review campaigns and flag suspicious patterns before they affect your scores.
If you cancel your subscription, your public company profile remains visible with existing culture scores. Your private analytics data is retained for 90 days after cancellation in case you reactivate. After 90 days, private analytics data is permanently deleted. Your public culture scores remain, as they represent genuine employee experiences.
If you discover a security vulnerability or have a concern about how your data is being handled, please contact us at hello@kultivia.company. We take all security reports seriously and respond within 24 hours.