Privacy Policy

Thank you for entrusting Kozu with your personal information and any other data you give us while using our platform. Holding onto your data is a serious responsibility, and we want you to know how we handle it.

The short version

We only collect the minimum amount of data needed to fulfill the purpose of your interaction with us. We treat your data with the same care we do our own, and we don't sell your data to anyone else. To get all the details of our policy, please the full (and more legally-formal) terms below.

Interpretation and Definitions

Interpretation

Throughout the terms of this Privacy Policy, words of which the initial letter is capitalized have meanings defined in the section titled "Definitions", and have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service or parts of our Service.
• Affiliate means an entity that controls, is controlled by or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
• Application means a software program provided by the Company, accessed by You on any electronic device. Applications provided by the Company are also collectively referred to as "The Kozu Platform".
• Company (referred to as either "the Company", "We", "Us" or "Our" in this Policy) refers to Kozu Inc, a Delaware Corporation.
• Cookies are small files that are placed on Your computer, mobile device or any other device by a website containing, among other things, data on Your interaction with that website.
• Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
• HIPAA Business Associate means a person or entity that creates, receives, maintains, or transmits Protected Health Information on behalf of a Covered Entity as defined in 45 CFR § 160.103.
• HIPAA Covered Entity means a health care provider, health plan, or health care clearinghouse, as defined in 45 CFR § 160.103.
• Personal Data is any information that relates to an identified or identifiable individual.
• Protected Health Information is any information, as defined in 45 C.F.R § 160.103, related to the past, present, or future physical or mental health of an individual. Use of the term "Protected Health Information" or "PHI" in this Policy shall mean both electronic and non-electronic Protected Health Information, unless another meaning is clearly specified.
• Service refers to the Applications or the Website or both.
• Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
• Website refers to the public-facing marketing website, accessible at https://kozu.co
• You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

The type of data we collect

Information from website browsers

If You are just browsing the Website, we collect the same basic information that most websites collect. We use common internet technologies, such as Cookies and web server logs. This is information we collect from all visitors to the Website, whether they have an Account with Us or not. This can include the visitor's browser type, language preference, referring site, and the date and time of each visitor request. We also may collect Internet Protocol (IP) addresses.

Why do we collect this?

We collect this information to better understand how visitors use the Website, and to monitor and protect the security of the Website.

Information from users with Accounts

Personal Data

If You create an Account or otherwise log in to The Kozu Platform, we may ask you for a minimal amount of Personal Data in order to provide You our Services. You may also have the option to give us additional Personal Data, and we will indicate which Personal Data is optional vs which Personal Data is required.

Usage Data

We collect information about how You use the Kozu Platform, which may include Your browser type, browser version, the pages of The Platform that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

Why do we collect this?

• We need your Personal Data to create your Account, and to provide the Services you request.
• We use your Personal Data, specifically your user name and email address, to identify you on The Platform.
• We may need to contact you to provide updates or important communications related to the functionality of The Kozu Platform, including security updates, when necessary or reasonable for their implementation.
• We use Your usage data to improve The Platform's performance and security.

Information from HIPAA Covered Entities

We may collect Protected Health Information (PHI) from HIPAA Covered Entities as a HIPAA Business Associate. The exact terms of this arrangement shall be governed by a Business Associate Agreement, as defined by 45 CFR § 160.103, which shall be fully signed before We are given access to any PHI controlled by the HIPAA Covered Entity. If You access The Kozu Platform as a representative of a HIPAA Covered Entity, you must understand your obligations to protect this PHI from unauthorized disclosure. We safeguard all PHI stored by The Platform according to our security practices.

Our use of Cookies and tracking

Cookies

We use Cookies to make interactions with our Service easy and meaningful. We use Cookies (and similar technologies, like HTML5 localStorage) to keep you logged in, remember your preferences, and provide information for future development of our Services.

A Cookie is a small piece of text that our web servers store on your computer or mobile device, which your browser sends to us when you return to our site. Cookies do not necessarily identify you if you are merely visiting the Website; however, a Cookie may store a unique identifier for each user logged-in to an Account on the Kozu Platform. The Cookies We set are essential for the operation of the Services, or are used for performance or functionality. By using our Services, you agree that we can place these types of cookies on your computer or device. If you disable your browser or device's ability to accept Cookies from Us, you will not be able to log-in or use our Services.

Plausible Analytics

We use Plausible Analytics as a third-party analytics service to monitor use of Our Services. Plausible Analytics does this "without collecting any personal data or personally identifiable information (PII), without using cookies and while respecting the privacy of the website visitors". You can read more about their Data Policy here.

Tracking

We do not track your online browsing activity on other online services over time and we do not permit third-party services to track your activity on our Services beyond our use of Plausible Analytics as described above.

Please see our section on email communication to learn about our use of pixel tags in marketing emails.

How We share the information we collect

We do not disclose Personal Data outside of Our Services, except in the situations listed in this section or in the section below on Compelled Disclosure.

• With Service Providers: We may share Your Personal Data with Service Providers to monitor and analyze the use of our Service.
• For business transfers: We may share or transfer Your Personal Data in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
• With Affiliates: We may share Your information with Our Affiliates, in which case we will require those Affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with Us.
• With Your consent: We may share Your Personal Data for any other purpose with Your consent.

Compelled Disclosure

We may disclose Personal Data or other information we collect about you to law enforcement in response to a valid subpoena, court order, warrant, or similar government order, or when we believe in good faith that disclosure is reasonably necessary to protect our property or rights, or those of third parties or the public at large.

In complying with court orders and similar legal processes, We strive for transparency. When permitted, We will make a reasonable effort to notify You of any disclosure of Your information, unless We are prohibited by law or court order from doing so, or in rare, exigent circumstances.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

How we secure Your Personal Data

We take all measures reasonably necessary to protect Your Personal Data from unauthorized access, alteration, or destruction; maintain data accuracy; and help ensure the appropriate use of Your Personal Data. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it.

No method of transmission, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security. For more information, see our various security disclosures.

How We communicate with You

We may use Your Personal Data to communicate with you, if you have explicitly given us permission to do so, and only for the reasons you have given permission. Depending on your email settings, We may occasionally send notification emails about new features, requests for feedback, important policy changes, or offer customer support. We also send marketing emails, but only with your consent. There is an unsubscribe link located at the bottom of each of the emails we send you. Our emails might contain a pixel tag, which is a small, clear image that can tell us whether or not you have opened an email and what your IP address is. We use this pixel tag to make our email more effective for you and to make sure we are not sending you unwanted email. If you prefer not to receive pixel tags, please opt out of marketing emails.

Children's Privacy

Our Services do not address anyone under the age of 13. We do not knowingly collect Personal Data from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page. We will let You know via email and/or a prominent notice on Our Services prior to the change becoming effective and update the "Effective date" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

• By email: support@kozu.co