Privacy Policy

Scope and responsible organization

thekatos is the product name used for the website and campaign workspace at this domain. The organization legally responsible for a particular account or campaign is identified in the applicable account notice, order, or agreement.

This policy covers personal information handled through the public website, account access, campaign records, support communications, connected creator or channel accounts, and payout administration. A separate written agreement may provide additional terms for an organization using the service.

Information we may collect

Information you or your organization provide

• Contact and account details, such as name, email address, organization, role, and account settings.
• Campaign records, including briefs, messages, creator information, deliverables, review notes, approvals, links, and uploaded materials.
• Support and business communications sent to the contact addresses published on this website.
• Tax, identity, eligibility, and payout information required to administer a creator payout or meet legal obligations.

Connected account information

If you connect a creator or channel account, including a YouTube account, we may receive the information covered by the permissions shown during authorization. The information available depends on the connected service, your settings, and the permissions you grant. You can revoke access through that service where it provides such controls.

Payout information

A payout record may include the selected route, currency, status, recipient identifiers, and compliance information. Depending on country, currency, account eligibility, and provider support, available routes may include bank transfer, PayPal, Payoneer, Wise, or Cash App. Listing a route does not guarantee its availability for every account or country. A payout provider may collect payment or banking details directly under its own privacy terms.

Technical information

• IP address, browser and device information, approximate location derived from IP, and request timestamps.
• Security, authentication, error, and activity records generated when the service is used.
• Browser storage and similar technologies described in the Cookie Policy.

Why information may be used

• To provide account access and maintain campaign, delivery, and payout records.
• To connect brands, creators, and authorized account users for a campaign.
• To review account eligibility, investigate misuse, and protect the service.
• To route support requests and keep a record of operational communications.
• To maintain, troubleshoot, and improve product reliability and usability.
• To comply with tax, accounting, regulatory, and lawful government requirements.

The legal basis depends on the processing and jurisdiction. It may include performing a contract, taking requested pre-contract steps, complying with law, pursuing a legitimate interest that is not overridden by individual rights, or acting with consent where consent is required.

When information may be disclosed

Information may be disclosed only as relevant to the purpose for which it is handled:

• To brands, creators, and authorized users participating in the same campaign.
• To providers supporting hosting, authentication, communications, security, connected accounts, payouts, and customer support.
• To professional advisers, auditors, or counterparties where confidentiality obligations apply.
• To public authorities or other parties when required by law or necessary to protect legal rights and safety.
• In connection with a reorganization or transfer of the service, subject to appropriate safeguards.

Service providers receive information according to their function and applicable contractual terms. Current provider details may be requested through the privacy contact below where disclosure is appropriate.

Retention and security

Retention periods depend on account status, campaign requirements, payout and tax records, legal obligations, disputes, security needs, and backup cycles. Information is deleted or de-identified when it is no longer reasonably required for those purposes.

Administrative, organizational, and technical safeguards are used in proportion to the information and risk. No internet transmission or storage system can be guaranteed to be completely secure. Contact support promptly if you believe an account is at risk.

International processing

Information may be processed in countries other than the country where it was collected when account users or service providers operate internationally. Where required, an approved transfer mechanism or other legally recognized safeguard is used.

Your rights and choices

Depending on your location and the processing involved, you may be able to request access, correction, deletion, restriction, objection, or a portable copy of certain personal information. You may also withdraw consent for future processing where consent is the legal basis. See the data protection rights page for request instructions.

Some information may need to be retained or processed despite a request, including where required by law, needed to complete an active campaign, or necessary to establish or defend legal claims. Any applicable exception will be explained in the response.

Children

thekatos is intended for adults acting in a business or creator capacity. It is not directed to children. If you believe a child has provided personal information without appropriate authorization, contact the privacy address below.

Policy changes

This policy may be revised as the service, legal requirements, or handling practices change. The updated date identifies the version published on this page. Additional notice will be provided when required by applicable law.

Privacy contact

Send privacy questions or rights requests to privacy@thekatos.com. Include the account email and a clear description of the request, but do not send passwords, full banking details, or identity documents unless you are given a secure route.