Privacy Policy
This policy explains which personal data Koolab processes, why, for how long, who it is shared with and how to exercise your rights. It describes the Service as it actually works at the version date. The French version prevails in case of discrepancy.
1. Data controller
The data controller is WEND TECH, a sole proprietorship registered with the Trade and Personal Property Credit Register (RCCM) of Bobo-Dioulasso, Burkina Faso, under number BFBBD012025A1000864, tax identification number (IFU) 00268427X, operated by Wend Pegre Aristide Sawadogo.
Publisher's legal contact details: phone (+226) 65 17 07 78, e-mail [email protected], website www.wendtech.site.
For any question about your data: [email protected].
2. Registration and account data
- Creator registered by e-mail: display name, e-mail address, password (stored hashed only, never in clear), country.
- Creator signed in with TikTok in the app, with their authorisation: TikTok account identifier, display name, @username, profile picture, follower count, and access tokens stored encrypted.
- Brand (former offer): contact name, company name, e-mail, hashed password, country, city, optional phone.
3. Sign-in data
- Session: a session token, stored server-side and in a strictly necessary cookie (not readable by scripts), valid 7 days for Creators and revoked on sign-out, password change, reset or account deletion.
- Password reset: a single-use token valid one hour, of which only a fingerprint is stored.
- Abuse protection: the number of sign-in attempts and requests is limited per IP address and per e-mail address; these counters are kept in server memory for minutes to hours and are not stored in the database.
4. Public profile and voluntarily published information
Your public profile (koolab.cc/@name) and media kit are visible only if you tick "Publish my profile"; you can hide them at any time. They only show what you enter there: display name, chosen address, headline, intro, city and country, categories, languages, links to your social networks and declared follower count, portfolio items (links, titles and, if you add them, one image per item), a cover photo if you add one, services and indicative rates, and a professional e-mail or WhatsApp number only if you add them.
Photos you send are resized and re-encoded by Koolab; their metadata (EXIF data, including GPS position, camera and date taken) is removed before they are stored, and the file name is not kept. They are stored at a random, unlisted address: they are only displayed on your published profile, but remain technically reachable by anyone who knows that address until they are removed. Only publish photos you hold the rights to, with the consent of any recognisable person.
Your sign-in e-mail and password never appear there.
Numbers you type are shown as "declared". Only numbers read from a connected TikTok account are presented as verified, with the date they were read.
5. Visit statistics
Koolab counts visits of your public page per day and shows you totals (7 days, 30 days, all time). To avoid counting the same person twice on the same day, the visitor's IP address is combined transiently, in server memory, with a random value to form a fingerprint valid for one day; neither the IP address nor any visitor identifier is stored by Koolab. Robots, link previews and your own visits while signed in are not counted.
6. Collaboration tracker and declared amounts
The collaboration tracker contains what you note there: partner name, contact (name, e-mail or phone), stage, deadline, what is planned, agreed amount, payment received or not, notes. This information is visible to you only. Amounts are your own declarations: Koolab neither receives nor transfers money and does not verify them.
Your contacts' details are third-party data: only enter what you need. The Koolab team only sees anonymous totals (number of tracked collaborations).
7. Pro survey answers
The "Pro" survey collects, if you wish, the features you would be interested in, the monthly price that would seem fair to you and a free comment. The answer is optional, editable and withdrawable at any time; it is neither a subscription nor a commitment. The team reads it as totals.
8. Technical logs and security
The Service writes technical logs (date, route called, response code, request identifier, signed-in user identifier) without form contents or passwords. Our hosting providers and content delivery network keep their own connection logs (IP address, date, requested page) for a limited time set by their terms, for security purposes.
Actions by Koolab administrators on an account (hiding a profile, removing a photo, suspension) are logged with their reason.
9. Purposes and legal bases
- Creating and running your account, publishing your public profile and media kit, providing the Studio tools: performance of the service you ask for (Terms).
- Counting visits of your page, preventing fraud and abuse, moderating public profiles, securing the Service: legitimate interest of Koolab and of the people concerned.
- Understanding interest in a future Pro offer: your consent, which you can withdraw at any time.
- Sending you the e-mails needed to run the account (password reset): performance of the service. Koolab sends no marketing e-mails.
- Meeting our legal obligations, notably accounting ones, for the former campaign offer.
10. Hosting, recipients and processors
Your public profile and media kit, if you publish them, are visible to anyone with the link and may be indexed by search engines, unless you tick "Hide my profile from search engines" in "My profile". Your other data is not shared with any brand or partner.
Koolab uses the following providers, which process data on its behalf under their contractual confidentiality commitments:
- Supabase, Inc.: database and photo storage, hosted in Frankfurt (Germany, European Union); profile photos are delivered through its content delivery network;
- Render Services, Inc.: hosting of the application and website, Frankfurt region (European Union);
- Cloudflare, Inc.: domain name, protection and delivery of the website, global network;
- TikTok: sign-in and statistics reading, only if you choose it in the app;
- Resend, Inc.: sending of password-reset e-mails, only when automatic sending is enabled; otherwise the link is given to you by the Koolab team.
11. International transfers
Your data is hosted in the European Union and may transit through Cloudflare's global network; providers may access it from other countries as part of their service. These transfers are covered by the providers' contractual commitments. Koolab undertakes to complete the formalities your country's regulations require for such transfers; the status of these steps is kept up to date by the publisher.
12. Retention
- Account, public profile, media kit, photos, visit counts, collaboration tracker, Pro survey answer: for the life of the account; erased as soon as it is deleted.
- Photo replaced or removed (by you or by moderation): erased from storage at once.
- Account identity data (name, e-mail, phone, password): erased or anonymised as soon as the account is deleted.
- Sessions: revoked on sign-out or deletion; reset tokens: one hour.
- Administration action log: kept without time limit, as it guarantees the traceability of decisions; it does not contain your content.
- Accounting records of the former campaign offer (none linked to a real user exists at the version date): 10 years, under OHADA accounting obligations.
- Historical waiting list: until you ask to be removed.
13. Your rights
You have the right to access, rectify, erase, object to and restrict the processing of your data, and to withdraw consent. You can edit or hide your public profile, withdraw your survey answer and delete your account yourself from the Studio. For any other request, write to [email protected]; proof of identity may be requested. Koolab answers within a reasonable time.
15. Account deletion
You can delete your account from the Studio, from the app or by e-mail. The "Delete my account" page describes the procedure, what is erased immediately and what is kept.
16. Minors
The Service is for people aged 18 or over. Koolab deletes accounts created by younger people as soon as it becomes aware of them.
17. Contact for personal data
To exercise your rights or ask a question: [email protected]. To contact the data controller: see section 1.
18. Changes to this policy
This policy may change. The version date is shown at the top of the page; significant changes will be announced by e-mail or in the Service.