Privacy Policy
Scope of this policy
This Privacy Policy explains what information Koo collects, how we use it, and the choices you have. It applies to the Koo platform, the console, the marketing site, and related services. Terms not defined here have the meaning given in our Terms of Service.
Information you provide
When you create an account and use Koo we collect: your sign-in identity from Google-based authentication, such as your name, email address, and a unique identifier; a phone number if you enable multi-factor authentication by text message; billing details handled by our payment processor (we receive limited information such as a card’s brand, its last digits, and payment status, never full card numbers); the code, data, configuration, and other content you deploy or store ("Your Content"); and the contents of any support requests you send us.
Information we collect automatically
As you use Koo we collect the operational and security data needed to run the service: request and application logs, build and deployment records, resource usage and metrics used for billing and capacity, an audit trail of significant actions on your account, and basic device and connection information such as IP address and browser type. We use this data to operate, secure, troubleshoot, and bill for the service.
Product analytics
Koo is adding first-party product analytics to understand how the product is used and to improve it. This analytics is server-side and cookieless: we record a small number of milestone events — for example, that an account completed onboarding or made its first deployment — keyed only to an account identifier. We do not use third-party analytics services, we do not track you across other sites, and we set no analytics or advertising cookies.
Cookies and local storage
Koo uses cookies and browser local storage only for authentication, session management, and remembering preferences such as theme. We do not use them for advertising or cross-site tracking. See our Cookie Notice for details.
How we use information
We use the information we collect to provide, operate, secure, and improve Koo; to run and bill for your services; to authenticate you and to prevent abuse and fraud; to provide support; to send service, security, and billing communications; to power discovery and showcase features for content you choose to make public; and to comply with our legal obligations.
Service providers
We rely on a small set of service providers ("subprocessors") to run Koo, and we share only the information each needs to perform its function: Control Plane (the cloud infrastructure on which your services run), Cloudflare (object and media storage through R2 and bot and abuse protection through Turnstile), Stripe (payment processing), Google Firebase (authentication), Twilio (multi-factor authentication messages), and Resend (transactional email). Each processes data on our behalf under its own terms and security commitments.
How we share information
We do not sell your personal information and we do not share it for advertising. We share information only with the subprocessors above, when you direct us to (for example, by publishing a showcase listing), to comply with law or valid legal process, to enforce our terms, or to protect the rights, safety, and security of Koo, our users, and the public. If Koo is involved in a merger or acquisition, information may transfer as part of that transaction subject to this Policy.
Data retention
We retain your information for as long as your account is active and as needed to provide the service. After account deletion we keep data for a limited grace period and then permanently remove it, except where we must retain certain records to meet legal, tax, accounting, or security obligations. Audit records are retained on our infrastructure’s audit contexts for a limited period.
Your choices and rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to or restrict certain processing. Self-service export and deletion are on our roadmap; in the meantime, contact support@koo.io and we will act on your request. You can also update account details and disable optional features such as text-message multi-factor authentication in the product.
Security
We use technical and organizational measures to protect your information, including encryption of sensitive values at rest and in transit and access controls on our systems. No method of storage or transmission is perfectly secure, and you are responsible for keeping your credentials and tokens safe.
International transfers
Koo and its providers may process information in countries other than the one where you live. Where required, we use appropriate safeguards for such transfers.
Children
Koo is not directed to children under 13 and we do not knowingly collect personal information from them. See our COPPA Statement for how we handle reports of under-13 accounts.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will change the version and date shown above and, for material changes, provide additional notice where appropriate.
Contact
Questions and privacy requests can be sent to support@koo.io.