Legal
Privacy policy
Updated November 4, 2026
Draft. Bracketed items are placeholders to be completed by counsel. This draft is written to be compatible with GDPR, UK GDPR and CCPA, but has not been reviewed.
1. Controller
[Company legal name], [registered address], operator of Kocolink. Contact: privacy@kocolink.ai [to be confirmed]. [EU / UK representative, if required.]
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account | Name, email, password hash, country, age confirmation and time | You |
| Creator profile | Bio, languages, niches, rate card, portfolio links | You |
| Linked social accounts | TikTok handle, public profile data, follower and engagement statistics, public posts submitted for orders | Public platform data retrieved by our data service |
| Collaboration | Briefs, applications, messages, drafts, review comments, ratings | You and the other party |
| Payments | Wallet balances, ledger entries, deposit receipts, payout method details (stored encrypted) | You and payment operations |
| Technical | IP address, device and log data, security events | Automatically |
| Website enquiries | Name, work email, company, website, market, budget range, message | Forms on this site |
3. Why we use it
- To provide the Service and perform our contract with you.
- To verify account ownership and age eligibility.
- To match briefs with creators using profile, content and audience data.
- To process payments, prevent fraud and off-platform payment requests, and resolve disputes.
- To translate messages and briefs and to run AI features you request.
- To comply with legal obligations.
- To reply to enquiries you send us.
[Legal bases per purpose to be confirmed.]
4. Sharing
- With the other party of a collaboration, limited to what the collaboration needs (see the help article on what others can see).
- With service providers that host, process, translate or analyse data on our behalf, under contract.
- With payment partners once connected.
- Where required by law.
We do not sell personal data.
5. International transfers
[Transfer mechanisms, for example standard contractual clauses, to be described.]
6. Retention
We keep data for as long as your account is active and as needed afterwards for legal, accounting and dispute purposes. [Retention periods per category to be defined.]
7. Your rights
Depending on where you live, you can access, correct, export or delete your personal data, object to or restrict processing, and withdraw consent. To make a request, contact [privacy email] or use the Support page. You can also complain to your local data protection authority.
8. Children
The Service is not directed at children. Paid collaborations require users to be 18 or older.
9. Security
Payout details are encrypted at rest. Access to personal data is limited to staff who need it, and sensitive operations are audited.
10. Changes
We will post updates here and notify you of material changes.