1. Who We Are

This Privacy Policy describes how KO Data Oy ("KO", "we", "us") collects, uses, and stores personal data when you use our marketing and revenue intelligence platform at kodata.pro.

KO Data Oy is the data controller for account and usage data. For data you bring into the platform from your own systems and ad accounts, you are the data controller and KO acts as your data processor. This is covered separately in our Data Processing Agreement.

2. Data We Collect

Account data

When you register, we collect your name, work email address, company name, and job role. This is required to create and manage your account.

Usage data

We collect information about how you use the platform — such as pages visited, features used, and session activity. We also collect technical logs and error diagnostics to maintain service quality.

Connected platform data

When you connect third-party services, KO retrieves data from those platforms via their official APIs. This may include:

Ad spend, impressions, clicks, and conversion data from Meta, Google Ads, LinkedIn, TikTok
Deal pipeline, lead, and revenue data from CRM systems like HubSpot or Pipedrive
Traffic and event data from analytics tools like Google Analytics 4

This data is processed on your behalf. You control what you connect and can revoke access at any time.

3. How We Use Data

We use the data we collect to:

Provide and operate the Service
Generate attribution reports and revenue analytics
Authenticate users and maintain account security
Diagnose issues and improve platform performance
Communicate with you about your account, updates, and support

We do not use your data for advertising and do not sell it to third parties. We do not use your data to train AI models for any third party. With your explicit consent — provided when you activate AI features in the platform — your data may be used to improve KO's own AI-powered functionality. You can withdraw this consent at any time from your account settings.

4. Data Ownership

You own your data. All business data you bring into KO — ad metrics, CRM records, revenue figures — remains yours. We process it only to deliver the Service you have subscribed to.

We do not claim any rights over your data beyond what is needed to operate the platform.

5. Data Storage & Infrastructure

All data is stored on our self-hosted, privately managed server infrastructure. Our hosting provider is Hetzner, with data centers located in the European Union (Germany and Finland).

We do not use third-party SaaS data warehouses (such as Snowflake, BigQuery, or AWS Redshift) to store your business data. Your data stays on servers we control directly.

6. Data Sharing

We do not sell your data. We share it only in the following limited circumstances:

Infrastructure providers: Hetzner (EU hosting) for hosting and server operations, under confidentiality obligations
External APIs: Data is retrieved from and sent to platforms you explicitly authorize (Meta, Google, LinkedIn, etc.) as part of the integration you configure
Legal obligation: If required by law, court order, or to protect the rights or safety of our users or company

No marketing, analytics, or advertising networks receive your data.

7. Data Retention

We retain account and usage data for as long as your account is active. After you cancel or close your account, we retain your data for 30 days to allow for recovery, then delete it permanently.

You can request early deletion at any time by contacting us at hello@kodata.pro. We will fulfill deletion requests within 30 days.

8. Security

We take data security seriously. Our measures include:

Encryption of data in transit using TLS
Strict access controls — only authorized personnel can access production systems
Isolated server environments with no shared multi-tenant data storage
Regular security reviews and patching of infrastructure

No system is completely immune to risk. We will notify you promptly in the event of a data breach that affects your personal data, as required by applicable law.

9. Your GDPR Rights

If you are located in the EU or EEA, you have the following rights under the General Data Protection Regulation (GDPR):

Access — request a copy of the personal data we hold about you
Correction — request correction of inaccurate or incomplete data
Deletion — request deletion of your personal data
Restriction — request that we limit how we process your data
Portability — request your data in a machine-readable format
Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at hello@kodata.pro. We respond to all requests within 30 days. If you believe we are not handling your data lawfully, you have the right to lodge a complaint with your national data protection authority.

10. Cookies

We use a minimal set of cookies. See our Cookie Policy for details on what we use and how to manage preferences.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to active users via email. The date at the top of this page always reflects the most recent revision.

12. Contact

For privacy-related questions or to exercise your rights, contact us at hello@kodata.pro.

KO Data Oy — Helsinki, Finland