Privacy Policy

1. Introduction

Sumosoft Inc., doing business as Kazokus ("we," "us," or "our") operates the Kazokus platform (the "Service"), a multi-tenant community management platform. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

• Create an account (name, email address, password)
• Sign in with Apple, Google, Microsoft or LINE. We receive the account identifier that provider assigns you, and the name, email address and profile photo it shares with us.
• Create or manage an organization or community
• Complete your user profile (profile picture, bio, location)
• Post content (forum posts, articles, event listings, marketplace items)
• Upload photos, videos or files, including from your phone's camera or photo library
• Communicate with other users or with us
• Make purchases or process payments through the platform
• Subscribe to newsletters or marketing communications
• Participate in surveys, contests, or promotions

2.2 Information Collected Automatically

When you access the Service, we may automatically collect:

• Device information (device type, operating system and browser type on our website; device model, operating system version and app version in the Kazokus app)
• Log data (IP address, access times, pages viewed, referring URL)
• Usage data (features used, interactions, time spent on pages)
• Location data (based on IP address, at a general geographic level)
• Cookies and similar tracking technologies on our website (see Section 6)

2.3 Payment Information

When you make purchases through the Service, payment processing is handled by our third-party payment processor, Stripe. We do not store or have access to your complete credit card numbers. We may receive limited information from Stripe, such as the last four digits of your card, card type, and billing address, for transaction records and fraud prevention.

2.4 The Kazokus App

The Kazokus app for iPhone connects to the same Kazokus platform as our website, so everything in this policy applies to it. In addition:

• Push notifications: If you allow notifications, we store a notification token for your device, with its model, operating system version and app version, so we can deliver notifications to it. Apple's Push Notification service delivers each one. You can turn notifications off at any time in your device's Settings, and we stop sending to a device when you sign out of it.
• Camera and photos: The app opens your camera or photo library only when you choose to add a photo, and uploads only the photos you select.
• What the app does not do: The app contains no advertising, analytics or crash-reporting tools. It does not use your device's advertising identifier, does not track you across other companies' apps or websites, and does not collect your location.
• Deleting your account: You can delete your account from inside the app, under Profile. Section 7 explains what deletion removes.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Process transactions and send related information
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Communicate with you about products, services, offers, and events
• Monitor and analyze trends, usage, and activities in connection with the Service
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Personalize and improve your experience on the Service
• Comply with legal obligations

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS
• Encryption of sensitive data at rest
• Regular security assessments and monitoring
• Access controls limiting who can view personal data
• Secure password hashing

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your activity on the Service. Cookies are small data files stored on your device.

Types of Cookies We Use:

• Essential Cookies: Required for the Service to function properly (e.g., authentication, security).
• Functional Cookies: Enable personalized features and remember your preferences.
• Analytics Cookies: Help us understand how users interact with the Service so we can improve it.

You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of the Service.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. We will also retain and use your information to the extent necessary to:

• Comply with our legal obligations
• Resolve disputes
• Enforce our agreements
• Protect against fraudulent or illegal activity

You can delete your account at any time in Account Settings on the web or in the Kazokus app. Deletion is immediate: we remove your profile and personal information and cancel your subscriptions. Posts, comments and messages you shared in communities remain, attributed to "Deleted User", so other members' conversations stay intact. Some information may be retained in our backup systems for a limited period, and we may retain certain information, such as transaction records, as required by law.

When you report content, we record your IP address with the report so we can detect abuse of the reporting system, such as coordinated false reports. We delete that IP address 90 days after the report is made. The report itself is kept as part of our moderation records.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: You can request access to the personal information we hold about you.
• Correction: You can request that we correct inaccurate or incomplete information.
• Deletion: You can delete your account yourself in Account Settings, or request that we delete your personal information, subject to certain exceptions.
• Data Portability: You can request a copy of your data in a structured, commonly used format.
• Opt-Out of Marketing: You can opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us.
• Withdraw Consent: Where we rely on consent, you can withdraw it at any time.

To exercise these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you believe that a child under 16 has provided us with personal information, please contact us.

10. International Data Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside the United States and choose to provide information to us, please note that we transfer the data to the United States and process it there.

By using the Service, you consent to the transfer, processing, and storage of your information in the United States and other countries where we or our service providers operate.

11. Third-Party Services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access.

Key third-party services we use include:

• Stripe: For payment processing. See Stripe's Privacy Policy.
• Cloudflare: For content delivery and security. See Cloudflare's Privacy Policy.
• OpenAI: For automated content moderation of public community posts. Direct messages are never sent. See OpenAI's Privacy Policy.
• Anthropic: For AI features and, where a community has switched them on, its own custom moderation rules. See Anthropic's Privacy Policy.
• Apple: To deliver push notifications to the Kazokus app, and for Sign in with Apple if you use it. See Apple's Privacy Policy.
• Google: For Sign in with Google if you use it, and Google Analytics on our website. See Google's Privacy Policy.
• Microsoft: For Sign in with Microsoft if you use it. See Microsoft's Privacy Statement.
• LINE: For LINE Login if you use it, and for community notifications sent through LINE if you connect your account. See LINE's Privacy Policy.

12. Content Moderation

To keep community spaces safe, we automatically screen content posted publicly in communities. This covers thread posts and replies, room messages, announcements, articles and marketplace listings.

How the screening works

Public community content is screened in two stages:

• Simple checks that run on our own servers, looking at things like how many links a post contains and whether the same message has been posted repeatedly. Nothing leaves our servers for this stage.
• The text of the post is sent to OpenAI's moderation endpoint, which returns a set of scores indicating whether it contains harassment, hate speech, threats, violence, sexual content or self-harm material. Only the text of the post is sent. Your name, email address and account details are not.
• Where a community has written its own moderation rules, the text of the post may also be sent to Anthropic to be checked against them. This applies only to communities that have switched on AI features.

What happens to the results

Screening results are stored alongside the content so community moderators can review them, and may cause content to be hidden or flagged for a moderator to look at. A human can always review and reverse an automated decision. Community administrators can switch automated screening off for their community.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

For significant changes, we may also notify you by email or through a notice on the Service prior to the change becoming effective.