Privacy Policy

Last updated: November 2, 2026

How Kominote collects, uses, stores, shares, and protects personal information.

Website: https://mykominote.com

Support: support@kominotetechnologies.com

These terms apply to Kominote services where the relevant feature is available. Applicable laws and mandatory rights take precedence. Read together with the Terms of Service and applicable activity-specific agreements.

Scope and controller

Kominote LLC processes personal information to operate accounts, marketplace transactions, services, organizations, projects, fundraisers, community posts, mobile applications, and customer support. The specific legal entity and privacy contact must be confirmed.

Data categories

Information may include: identity and contact data; authentication provider identifiers (Google/Apple); public profile and professional credentials; organization authority documents; product and service listings; booking and order history; fundraiser organizer/beneficiary verification; donation amounts and receipts; payout and tax metadata; communications and support records; uploaded photos; device identifiers, IP addresses, cookies, approximate location and opt-in precise location; safety and fraud signals; and analytics/marketing preferences. Payment providers may directly collect card, banking, tax and identity data; Kominote should not store full card numbers or CVV.

Purposes and disclosures

Use data for authentication, transactions, donor receipts, organization administration, fraud and sanctions checks, payment processing, support, moderation, legal compliance, platform analytics, user-selected discovery, and consented marketing. Share only as necessary with transaction participants, authorized organization administrators, payment/identity providers, hosting, email, shipping, analytics, and competent authorities where legally required. Public content may be visible and indexed according to settings. Do not state that data is never sold/shared unless verified against analytics and advertising implementation.

Fundraiser-specific privacy

Organizers must obtain lawful authority to submit beneficiary names, health details, children's images, documents, and financial stories. Sensitive documentation should be collected in a restricted review workflow, not public posts. Publish only what is necessary to explain the campaign. Donor display name/anonymity choices must be honored as designed; payment and fraud records may still be retained privately.

Retention and security

Maintain a documented retention schedule by data category and applicable legal requirements. Apply role-based access, encryption in transit, appropriate encryption at rest, audit logging, vendor diligence, incident response, and limited access to sensitive evidence. No system is perfectly secure; notify affected persons/regulators when required by law.

Rights and international transfers

Provide applicable access, correction, deletion, portability, objection/opt-out and appeal rights according to jurisdiction. Identify any applicable state privacy rights, EEA/UK legal bases, transfer mechanisms, and data protection contacts after counsel/data mapping. Do not falsely claim GDPR/CCPA compliance without implementation.

Children and marketing

Platform account access is not directed to children under 13, or higher local minimums where applicable. Fundraiser images featuring children do not themselves authorize collecting data directly from children. Obtain required guardian consents. Separate transactional email from optional promotional messages and provide legally compliant unsubscribe mechanisms.

Contact and updates

Privacy requests: support@kominotetechnologies.com (replace with dedicated verified privacy inbox if configured). Publish effective and last-updated dates after approval. Material changes receive appropriate notice.

Updates and contact

We may update this policy prospectively, with legally required notice or renewed consent where applicable. Questions and reports: support@kominotetechnologies.com.