Privacy Policy

At Cozmos, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using Cozmos, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our platform.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Password (hashed; we do not store plain-text or reversible encryption of passwords)
• Account role selection (Brand or Influencer)
• Profile information (name, bio, avatar, timezone)
• Brand-specific: company name, website, logo, industry categories
• Influencer-specific: display name, content categories, languages, audience information

1.2 Social Media Verification Data

For influencers who verify their social media accounts, we collect:

• Social media platform (YouTube, Twitter/X)
• Social media handle and profile URL
• Follower/subscriber counts
• OAuth tokens (if OAuth verification method is used, stored securely)
• QR code verification data (if QR code method is used, temporarily stored for verification only)

1.3 Wallet and Transaction Data

We collect and maintain records of:

• Internal wallet balances and ledger entries
• Cryptocurrency deposit addresses assigned to your account
• Transaction history (deposits, escrow locks, payouts, refunds)
• External withdrawal addresses you provide
• Blockchain transaction hashes for audit purposes

1.4 Deal and Transaction Data

For all deals facilitated through the platform, we collect:

• Deal details (offer selected, publication date, pricing, deadlines)
• Brief form answers and requirements
• Uploaded assets and creative materials
• Draft submissions and revision history (if revisions are enabled)
• Final published content links
• Deal state changes and approval timestamps
• Dispute information and resolution details

1.5 Communication Data

We store all communications conducted through the platform:

• In-platform chat messages between brands and influencers (stored permanently for dispute resolution)
• Email communications sent through or to the platform
• Support ticket messages and correspondence

1.6 Usage and Analytics Data

We automatically collect certain information when you use Cozmos:

• Device information (browser type, operating system, device identifiers)
• IP address and approximate geographic location
• Platform usage data (pages visited, features used, time spent)
• Referral sources
• Cookies and similar tracking technologies (see Section 7)

2. How We Use Your Information

We use the information we collect for the following purposes:

• Platform Operations: To create and manage accounts, facilitate deals, process payments, and operate the marketplace
• Verification and Trust: To verify brand and influencer identities, authenticate social media accounts, and maintain platform quality
• Transaction Processing: To manage escrow, process deposits and withdrawals, track ledger balances, and enforce deal terms
• Dispute Resolution: To review disputes, access chat logs and deal history, and make fair resolution decisions
• Communication: To send transactional emails, notifications about deal status, platform updates, and support responses
• Security and Fraud Prevention: To detect and prevent fraudulent activities, unauthorized access, and policy violations
• Analytics and Improvement: To understand platform usage patterns, improve features, and enhance user experience
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

3. How We Share Your Information

3.1 With Other Users

Certain information is visible to other users by design:

• Influencer Profiles: Verified brands can view influencer profiles, including name, bio, categories, verified social accounts, audience metrics, and promotional offers
• Brand Profiles: Influencers can view basic brand information (name, logo) when receiving deal requests
• Deal Participants: Both parties in a deal can view all deal-related information, briefs, assets, and chat messages

3.2 With Administrators

Cozmos administrators have access to all platform data for:

• Brand and influencer verification and approval
• Deal monitoring and dispute resolution
• Strike enforcement and suspension management
• Wallet operations and transaction processing
• Customer support and troubleshooting
• Security monitoring and fraud prevention

3.3 With Service Providers

We may share information with trusted third-party service providers who assist with:

• Cloud hosting and infrastructure (Google Cloud)
• Database services (Supabase)
• Email delivery services
• Payment processing and blockchain infrastructure

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

3.4 For Legal and Safety Reasons

We may disclose your information if required to do so by law or if we believe such action is necessary to:

• Comply with legal obligations, court orders, or subpoenas
• Enforce our Terms of Service
• Protect the rights, property, or safety of Cozmos, our users, or others
• Investigate fraud, security breaches, or policy violations

3.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have.

3.6 What We Don't Do

4. Your Rights and Choices

4.1 Access and Portability

You have the right to access your personal information and request a copy of the data we hold about you. You can export most of your data directly from your account dashboard or contact us for a comprehensive data export.

4.2 Correction and Update

You can update most of your profile information directly through your account settings. If you need assistance correcting information, contact our support team.

4.3 Deletion

You may request deletion of your account and associated personal data by contacting support@cozmos.io. Please note:

• All active deals must be completed before account deletion
• Wallet funds must be withdrawn prior to deletion
• Certain data may be retained for legal compliance, dispute resolution, or fraud prevention purposes
• Completed deal records, chat logs, and transaction history may be retained in accordance with applicable laws

4.4 GDPR Rights (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have additional rights under GDPR:

• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

4.5 Communication Preferences

You can manage your email notification preferences through your account settings. Note that certain transactional emails (deal notifications, payment confirmations, security alerts) cannot be disabled as they are necessary for platform operation.

5. Data Retention

We retain your information for as long as necessary to provide the platform and fulfill the purposes described in this policy:

• Active Accounts: Account and profile data is retained while your account is active
• Completed Deals: Deal data, briefs, assets, and chat logs are retained indefinitely for dispute resolution and audit purposes
• Transaction Records: Wallet transactions and ledger entries are retained for at least 7 years for accounting and tax compliance
• Deleted Accounts: Most personal data is deleted within 90 days of account deletion, except as required for legal compliance
• Audit Logs: Administrator action logs are retained indefinitely for security and accountability

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data in transit is encrypted using TLS/SSL. Sensitive data at rest is encrypted.
• Access Controls: Strict role-based access controls limit who can access user data
• Password Security: Passwords are hashed using industry-standard algorithms and never stored in plain text
• Wallet Security: Private keys for custodial wallets are stored in secure, isolated environments with multiple layers of protection
• Monitoring: We monitor for unauthorized access, unusual activity, and security threats
• Auditing: All administrative actions are logged and auditable

Despite our security measures, no system is completely secure. You are responsible for maintaining the security of your account credentials and should notify us immediately of any unauthorized access.

7. Cookies and Tracking Technologies

7.1 What We Use

Cozmos uses cookies and similar technologies to:

• Essential Cookies: Required for authentication, session management, and core platform functionality
• Analytics (if used): We may use analytics services in the future to understand platform usage; if we do, we will update this policy
• Preference Cookies: Store your settings and preferences for a better experience

7.2 Third-Party Analytics

We may use analytics services (e.g. Google Analytics) in the future to improve the platform. If we do, we will update this policy and you may opt out via standard browser add-ons (e.g. the Google Analytics Opt-out Browser Add-on).

7.3 Your Cookie Choices

Most browsers allow you to control cookies through their settings. Note that disabling essential cookies may impact platform functionality.

8. International Data Transfers

Cozmos is hosted on Google Cloud infrastructure, which may store and process data in various countries. If you access the platform from outside the primary hosting region, your information may be transferred to and processed in countries with different data protection laws.

For EU/EEA users, we implement appropriate safeguards to ensure your data is protected in accordance with GDPR requirements, including Standard Contractual Clauses where applicable.

9. Children's Privacy

Cozmos is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes via email or platform notification. The "Last Updated" date at the top of this policy indicates when it was last revised.

We encourage you to review this Privacy Policy periodically. Continued use of the platform after changes indicates your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: