Privacy Policy

This policy explains how Kojo ("we," "us") handles information when brands and creators use kojo.gg, app.kojo.gg, and the program pages we host. It covers two groups of people: brand users who run programs on Kojo, and creatorswho apply to programs or appear in Kojo's creator network.

From brand users: account details (name, email, company, website), content you create in the app, and payment details. Card information is collected and stored by Stripe, not by Kojo.

From creators who apply:the information you submit on a program's application form: name, email, social handles, follower counts, and any note you include.

Creator network profiles: Kojo maintains a network of creator profiles built from creators who joined Kojo, applications, and publicly available creator data supplied by data partners: typically a name, social handles, audience size, content topics, bio, and where available a public contact email.

Automatically: standard usage and device data (IP address, browser, pages visited) used for security, rate limiting, and analytics.

• to provide and improve the Service;
• to build program drafts with AI from a brand's own website;
• to deliver applications from creators to the brands they applied to;
• to send creator invitations and offers on a brand's behalf (see section 4);
• to process subscriptions and prevent fraud and abuse;
• to send service emails (receipts, security, account notices).

When a brand invites a creator who hasn't opted in to hear from Kojo's brand partners, we send a single introduction that does not name the brand and links to an invite page. Choosing "show me who" on that page opts the creator in to this and future partner opportunities; opting in is always explicit and recorded with a timestamp.

Every email we send a creator includes a one-click way to stop all future emails. Once a creator opts out we suppress them across the platform. No brand can email them through Kojo again unless the creator themselves opts back in.

We don't sell personal information. We share it only with:

• the relevant brand: creators' applications and profiles are visible to the program they applied to; network profiles are browsable by subscribed brands;
• service providers that host and operate the platform: Vercel (hosting), Supabase (database), Stripe (payments), Resend (email), Anthropic (AI drafting), Firecrawl (website scanning), and creator-data partners;
• legal requirements: when required by law or to protect the Service and its users.

We keep information while an account is active or a creator profile remains part of the network, and as needed for legal and accounting purposes. Creators can opt out of contact at any time via any email's unsubscribe link, and anyone can request access to or deletion of their personal information by writing to hello@kojo.gg. We honor verified requests within 30 days.

We use cookies for authentication and session security, and lightweight analytics to understand product usage. We don't use third-party advertising cookies.

Data is encrypted in transit, access is restricted by row-level security and role-based permissions, and payment credentials never touch our servers. No system is perfectly secure. If we learn of a breach affecting your data we will notify you as required by law.

Kojo operates from the United States and processes data there. If you use the Service from elsewhere, you understand your information is processed in the US. Where regulations such as the GDPR apply, the rights described in section 6 (access, deletion, objection to contact) are available to you.

We'll post updates to this policy here and note the date at the top; material changes get direct notice. Questions: hello@kojo.gg.