This Privacy Notice explains how Kogmus AI (“Kogmus,” “we,” or “us”) handles personal information through kogmus.com, checkout, campaign onboarding, creator research, outreach and customer support. Kogmus determines how this information is used for its own service operations. When we process information solely on a customer’s documented instructions, that customer may also have its own privacy obligations.
1. Information we collect
- Website activity: session identifier, pages and buttons used, referral and campaign tags, approximate device type and timestamps.
- Contact and order information: name, business email, optional phone or WhatsApp, role, brand, selected plan, order and payment status. Payment card details are collected by Stripe and are not stored by Kogmus.
- Account access: verified email address, display name, password hash, login sessions and temporary verification or password-reset tokens. We do not store your password as readable text.
- Campaign information: product, audience, creator preferences, budgets, commission, samples, deliverables, usage rights, exclusions, claims guidance, approvals, files and messages you provide.
- Creator and professional information: public or commercially available profiles, content, business contact details, audience and performance signals, collaboration history and outreach responses.
- Support and operational records: messages, requests, campaign status, consent versions, opt-outs, suppression records and security logs.
2. Where information comes from
We receive information from you, your organization, public creator profiles, social and commerce platforms, creator responses, service providers and commercial data sources. Commercial signals may be estimated or incomplete and are reviewed for campaign use rather than treated as audited facts.
3. Why we use information
We use information to:
- process orders, verify plans and provide the requested service;
- research, score and review potential creators;
- send authorized outreach, follow up, triage replies and support initial negotiations;
- deliver reports, deal sheets, approvals, support and service messages;
- operate first-party analytics, measure checkout activity and improve the service;
- secure the site, prevent abuse, enforce terms and maintain required records;
- comply with law and establish, exercise or defend legal rights.
Depending on the context and applicable law, these activities rely on performing a contract, legitimate business interests, consent or legal obligations.
4. AI-assisted processing
We may use AI providers to interpret messages in the pre-onboarding chat and assist with matching, classification, analysis and drafting. Pre-onboarding drafts are stored in your browser until checkout, when your brief is saved to prepare your campaign even before payment. We limit the information shared to what is reasonably needed for the task and use human review in the service workflow. Do not submit passwords, payment card details or unnecessary sensitive personal information in a campaign brief.
5. How we share information
We may share information with service providers that support hosting and security, payment processing, email delivery, analytics, AI-assisted processing, creator research and business operations. Current core providers include Cloudflare-hosted site infrastructure, Stripe for checkout and payment processing, Resend for service email, and OpenAI for chat interpretation when live replies are enabled. We may also share campaign details with creators when you authorize outreach, with professional advisers, or when required by law.
We do not sell personal information or share it for cross-context behavioral advertising. We do not disclose customer confidential information for another company’s independent marketing.
6. International processing
Kogmus and its providers may process information in countries other than where you live. Those countries may have different data-protection rules. We use contractual, technical and organizational measures appropriate to the service and applicable requirements.
7. Cookies and analytics
Kogmus uses a first-party session cookie to connect page activity and checkout clicks during a short visit. It expires after approximately 30 minutes and is not used for advertising. Our first-party analytics does not run when the browser sends Do Not Track or Global Privacy Control. We also store your draft brief locally on your device so you can return to it. Start over clears the current draft. Rate limits use short-lived hashed network and session identifiers for security, separately from analytics. Customer accounts also use a necessary secure session cookie to keep you signed in, normally for up to seven days with renewal while in use. Sign out to end the current session. Password resets revoke existing sessions. Stripe and other linked services may use their own technologies under their privacy notices.
8. Retention
We keep campaign briefs and operational records while providing the service and generally for up to 24 months afterward. Website analytics is generally retained for up to 12 months. Transaction, tax, dispute, consent and legal records may be retained for up to five years or longer when law or an active claim requires it. Opt-out and suppression information may be kept as long as needed to honor the request. We may delete or de-identify information earlier when it is no longer needed.
9. Security
We use reasonable administrative, technical and access controls designed to protect information. No online system is completely secure, so we cannot promise absolute security. Private onboarding links should be treated as confidential because anyone holding the complete link may access the associated brief. After a brief is linked to your verified account, access requires signing in to that account.
10. Your choices and rights
Depending on where you live, you may ask us to confirm processing, provide access, correct, delete, restrict or export personal information, explain sharing, object to certain uses, or withdraw consent. You may also opt out of commercial outreach at any time. We will not discriminate against you for making a privacy request. Some information may be retained where required for transactions, security, suppression lists or legal obligations.
Send requests to contact@kogmus.com. We may need to verify your identity and relationship to the information before completing a request.
11. Children
The site and services are intended for businesses and adults. They are not directed to children, and we do not knowingly collect personal information from children.
12. Changes
We may update this notice as our services or practices change. The effective date and version at the top show when it was last revised. Material changes will apply prospectively and will be communicated when required.
13. Contact
Privacy questions and requests may be sent to contact@kogmus.com.