Privacy Policy

1. Who is responsible

Kolio is operated by an independent developer; there is no registered legal entity yet. For anything privacy-related — access, correction, deletion, export, or complaints — email support@kolio.ai.

2. What we collect from account holders

• Your account email address (used for magic-link sign-in and service email).
• Profile details you choose to add — creator directory profiles, media-kit contents, and offer details you publish.
• Content you create or upload: scripts, prompts, media, rendered videos, and scheduled posts.
• Usage events — telemetry about which features run (for example a render finishing or a post publishing), used to operate the product, meter credits, and improve reliability.
• Billing status from Stripe (plan, credit balance, payment events). Card numbers are handled by Stripe and never touch Kolio’s servers.

3. Click and scan analytics

When someone opens a tracked link or scans a QR code, we record the event type and timestamp, the referring page, the browser’s user-agent string, a bot-likeness flag, and a one-way hashed form of the network address used for rate-limiting and bot filtering. The raw IP address is not stored with the event. These counts power the campaign reports creators share.

4. Data your audience submits through creator pages

Creators use Kolio to host capture pages, surveys and polls, and a directory with intro requests. Through those pages, people who are not Kolio users submit data: lead names and email addresses, survey and poll responses, and intro-request contact details.

• Kolio processes this data on the creator’s behalf, to deliver it to that creator. The creator decides why it is collected and how it is used.
• Kolio never sells this data — the promise printed on every capture page — and does not use it for advertising or to build profiles across creators.
• It is retained until the creator deletes it or the creator’s account closes.
• If you submitted data through a creator’s page and want it removed, contact that creator, or email support@kolio.ai and we will handle it with them.

5. How we use data

To provide and operate the service, meter credit usage, prevent abuse (rate-limiting and bot filtering), fix bugs, and send service email such as magic links and billing notices. Kolio does not sell personal data and does not run third-party advertising or cross-site tracking.

6. Processors we rely on

Data is processed by the third-party services that run Kolio: Supabase (authentication and database), Stripe (payments), OpenAI and Anthropic (text generation), ElevenLabs (voice synthesis), fal.ai (video clip generation), HeyGen (avatar video), Zernio and Ayrshare (social posting), Cloudflare R2 (media storage), and AWS (video rendering and delivery). Content you generate is sent to the AI providers needed for the feature you use; audience-submitted data stays in the database and is not sent to AI providers.

7. Cookies and local storage

Kolio’s own pages set no advertising or analytics cookies. Sign-in sessions and preferences (such as display language) are kept in your browser’s local storage rather than cookies. Third-party pages you are handed off to — for example Stripe checkout and the billing portal — set their own strictly necessary cookies under their own policies.

8. Retention, deletion, and export

Account data is kept while your account is active. To delete your account, or to request a copy or deletion of specific data, email support@kolio.ai from your account email — that is the current mechanism; self-serve deletion and export are on the roadmap but not built yet, and we would rather say so than pretend. Deletion requests are honored within 30 days, except records we must keep (such as payment records held by Stripe).

9. International transfers

The processors above run in multiple regions, primarily the United States, so your data may be stored and processed outside the country you live in. Where a processor offers contractual safeguards for international transfers (such as standard contractual clauses), we rely on those safeguards.

10. Your rights and changes to this policy

Depending on where you live — including Hong Kong’s PDPO, Canadian privacy law, and the UK GDPR — you may have rights to access, correct, delete, or export your personal data, and to complain to a local regulator. Exercise any of them via support@kolio.ai. When this policy changes materially, we will update the “Last updated” date and notify account holders by email where the change affects them. See also the Terms of Service and Refund Policy.