Legal

Privacy Policy

Effective Date: October 8, 2025

Konnetta ("we," "us," or "our") operates the web application accessible at https://konnetta.com, a service designed to connect clients with vetted vendors for in-person business transactions worldwide. Our Platform facilitates the discovery, booking, and fulfillment of services such as photography, videography, content creation, tour guiding, and drone operations, akin to a specialized marketplace for travel-related professional engagements.

This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you access or use the Platform. By using the Platform, you consent to the practices described herein. This Policy forms an integral part of our Terms of Service, and in the event of any conflict, the Terms shall prevail to the extent permitted by applicable law.

We are committed to protecting your privacy and handling your data in compliance with relevant data protection laws, including but not limited to the General Data Protection Regulation (GDPR) for users in the European Economic Area, the California Consumer Privacy Act (CCPA) for California residents, and equivalent regulations globally. If you do not agree with this Policy, please do not use the Platform.

For questions about this Policy, please contact us at privacy@konnetta.com

Article 1: Information We Collect

We collect personal information to provide, maintain, and improve the Platform. Our collection practices are limited to what is necessary for these purposes.

1.1 Information You Provide Directly

When you register an account, post jobs, browse services, book engagements, or communicate via in-app messaging, you may provide:

• Personal Identifiers: Full name, email address, phone number, and profile details (e.g., location preferences, travel history).
• Account Information: Username, password, and verification data (e.g., government-issued ID for Vendor vetting).
• Transaction Details: Service descriptions, booking preferences, and ratings/reviews, excluding payment data which is processed solely by third-party providers.

1.2 Information Collected Automatically

As you interact with the Platform, we may automatically collect:

• Usage Data: IP address, browser type, device information, pages viewed, time spent on the Platform, and referral sources.
• Location Data: Approximate geolocation for service matching, derived from IP address or user-provided inputs (with consent where required).
• Technical Data: Cookies, web beacons, and similar technologies to track user sessions and preferences (see Article 8 for details).

1.3 Information from Third Parties

We may receive:

• Payment Processor Data: Confirmation of transactions from Stripe or PayPal, without storing sensitive payment details (e.g., card numbers).
• Verification Services: Background check results from integrated third-party providers for Vendor vetting.
• Social Media Integrations: Profile data if you link accounts (e.g., for login or sharing bookings).

We do not collect sensitive personal information (e.g., health data, biometric data) unless explicitly required for a service and with your affirmative consent.

Article 2: How We Use Your Information

We use the collected information for legitimate business purposes, ensuring proportionality and necessity under applicable laws.

2.1 Providing and Improving Services

• Facilitate user matching, job postings, bookings, escrow payments, and in-person service deliveries.
• Enable features such as real-time chat, dashboards, ratings, reviews, and dispute resolution.
• Personalize recommendations based on your travel destinations, service history, and preferences.

2.2 Communication and Support

• Send transactional emails (e.g., booking confirmations, service updates) and promotional communications (with opt-out options).
• Respond to inquiries via 24/7 customer support and in-app messaging.

2.3 Analytics and Security

• Analyze usage patterns to enhance Platform functionality and user experience.
• Detects and prevents fraud, unauthorized access, or violations of the Terms.

2.4 Legal and Compliance

• Comply with legal obligations, such as responding to lawful requests or enforcing our Terms.
• Aggregate anonymized data for research, reporting, and business development.

Article 3: Sharing and Disclosure of Your Information

We do not sell your personal information. Disclosures are limited to trusted partners and as required by law.

3.1 With Service Providers

Share with third-party vendors (e.g., Stripe/PayPal for payments, cloud hosts for storage, analytics tools like Google Analytics) under strict confidentiality agreements. Transmit data to vetted Vendors for booking fulfillment, limited to necessary details (e.g., contact info for meetups).

3.2 Business Transfers

In the event of a merger, acquisition, or asset sale, your information may be transferred as a business asset, subject to equivalent privacy protections.

3.3 Legal Requirements

Disclose to authorities if compelled by law, subpoena, or to protect rights, property, or safety. Share aggregated, de-identified data for marketing or statistical purposes.

You may request details on disclosures via our contact channels.

Article 4: Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information against unauthorized access, alteration, disclosure, or destruction.

4.1 Security Measures

• Encrypt data in transit (e.g., HTTPS) and at rest where applicable.
• Conduct regular security audits, vulnerability assessments, and employee training.
• Limit access to personal information on a need-to-know basis.

4.2 Your Responsibilities

• Maintain confidentiality of your account credentials.
• Report suspected breaches promptly.

Despite these efforts, no system is impenetrable; we disclaim liability for breaches not due to our gross negligence.

Article 5: Your Privacy Rights

Subject to applicable laws, you have rights regarding your personal information. These may include access, rectification, erasure, restriction, portability, and objection.

5.1 Exercising Rights

• Access: Request a copy of your data.
• Rectification: Correct inaccurate information.
• Erasure ("Right to be Forgotten"): Delete your data, subject to legal retention requirements (see Article 7).
• Objection: Opt out of processing for direct marketing or certain automated decisions.

To exercise these, submit a verifiable request to Contact@konnetta.com. We respond within 30-45 days, free of charge (unless manifestly unfounded).

5.2 CCPA-Specific Rights

California residents may request disclosures on sales/sharing (none occur), opt-out of sales, or limit sensitive data use.

5.3 Children's Privacy

The Platform is not intended for users under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children and will delete any discovered data.

Article 6: International Data Transfers

As a global Platform, data may be transferred to and processed in countries outside your residence, including the United States.

6.1 Safeguards

• We use Standard Contractual Clauses (SCCs), adequacy decisions, or equivalent mechanisms for GDPR compliance.
• Ensure recipient countries provide adequate protection levels.

You consent to such transfers by using the Platform.

Article 7: Data Retention and Deletion

We retain personal information only as long as necessary for the purposes outlined herein or as required by law.

7.1 Retention Periods

• Account data: Duration of active use plus 1 year post-termination.
• Transaction records: 7 years for legal/compliance reasons.
• Usage logs: 12 months.

7.2 Data Deletion

Users may request deletion at any time via Contact@konnetta.com. We will:

• Permanently erase or anonymize data within 30 days, except where retention is mandated (e.g., tax records).
• Provide instructions for self-deletion where feasible (e.g., account settings).

For app store compliance (e.g., Meta Dashboard), data deletion requests are processed as follows:

• Submit via privacy@konnetta.com with account details.
• We confirm receipt within 48 hours and complete deletion within 90 days, notifying you of completion or exceptions.

Deleted data cannot be recovered; backups are purged on overwrite cycles.

Inactive accounts may be deleted after 2 years of dormancy.

Article 8: Cookies and Tracking Technologies

We use cookies and similar technologies to enhance functionality and analyze usage.

8.1 Types of Cookies

• Essential: Necessary for Platform operation (e.g., session management).
• Analytics: Track performance (e.g., Google Analytics; opt-out via tools.doNotTrack).
• Preferences: Remember choices (e.g., language settings).
• Marketing: Personalized ads (with consent).

8.2 Managing Cookies

• Adjust preferences in browser settings or our cookie banner.
• "Do Not Track" signals are honored where possible.

For detailed lists, see our Cookie Policy.

Article 9: Changes to This Policy

We may update this Policy to reflect legal, operational, or Platform changes.

9.1 Notification

• Material changes posted on the Platform with 30 days' notice.
• Continued use post-update constitutes acceptance.
• Review periodically for updates.

Article 10: Contact Information

For privacy inquiries, complaints, or Data Protection Officer contact:

This Policy was last revised on October 8, 2025.