Privacy Policy
Koi.is (operated by Generativo Inc.) - Privacy Policy
Last Updated: July 12, 2025
1. Our Commitment to Your Privacy
This Privacy Policy explains how Generativo Inc., doing business as Koi.is or Koi ("we," "us," or "our"), collects, uses, and safeguards your information when you use the Koi.is website, application, and services (collectively, the "Service").
As a Canadian company, we are committed to protecting your privacy. Our practices are designed to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and this policy outlines our responsibilities and your rights regarding your personal information.
By using our Service, you agree to the collection and use of information in accordance with this policy. This Privacy Policy is an integral part of our Terms of Service.
2. Information We Collect and Why
We adhere to the principle of "data minimization," meaning we only collect the information that is strictly necessary to provide and improve our Service.
a) Information You Provide
- Account Information: When you register for a Koi.is account, we use the third-party service Clerk.com to manage secure authentication. Through Clerk, we have access to the basic information needed to create and manage your account, such as your name and email address.
- Payment Information: If you subscribe to a paid plan, our payment processor, Stripe.com, handles all payment details. We do not store or have access to your credit card number or other sensitive payment information. Stripe processes the transaction and provides us only with confirmation of your subscription and a non-sensitive identifier to manage your account status.
- Link and Project Information: We collect the content you provide to use the Service. This includes the long URLs you submit for shortening and any titles or descriptions you create for projects to organize your links.
b) Information from Visitors to Your Shortened Links (Analytics Data) To provide you with analytics, we collect a limited amount of anonymized and aggregated information when someone clicks a Koi.is link you have created. This data cannot be used to personally identify an individual visitor. This includes:
- Anonymized IP Address (the final portion is removed to prevent specific identification).
- The referring website, if available.
- The visitor's device type and browser (User Agent).
- The visitor's country and city of access.
We do not collect or store the IP address of our registered users when they use the Koi.is Service.
3. How We Use Your Information
The purposes for which we use your information are identified at the time of collection and are limited to the following:
- To Provide and Maintain the Service: To operate your account, create your links, and display your analytics dashboard.
- To Manage Subscriptions: To process payments via our third-party provider and manage your subscription status.
- To Communicate With You: To provide essential customer support, respond to your inquiries, and send technical notices, security alerts, and other administrative messages.
- For Security and Compliance: To protect the integrity of our Service, prevent fraud, investigate prohibited activities, and enforce our Terms of Service.
4. Sharing and Disclosure of Information
We do not sell or rent your personal information to third parties. We only share information with trusted service providers ("sub-processors") who perform services on our behalf and are essential for us to operate the Service.
Under PIPEDA, we remain accountable for the protection of your personal information when it is processed by these third parties on our behalf. We have vetted these providers and rely on their robust terms of service and data processing agreements to ensure they uphold a level of data protection consistent with this Privacy Policy and Canadian law.
For your transparency, our key service providers are listed below:
- Clerk.com: For user authentication and management. (Privacy Policy)
- Stripe.com: For secure payment processing. (Privacy Policy)
- Cloudflare: Provides our core hosting infrastructure, global content delivery network (CDN), performance, and security services. (Privacy Policy)
- BunnyCDN: Provides an additional global content delivery network (CDN). (Privacy Policy)
By using our Service, you acknowledge that we use these providers to process your information for the purposes outlined in this policy.
5. Data Storage and International Transfers
To provide a secure and performant global service, your data is handled in two ways:
-
Data at Rest (Primary Storage): Our primary application databases, where your core user content (such as account details, links, and project information) is stored, are hosted by Cloudflare. These databases are located in their Eastern North America (ENAM) region, which includes data centers in both Canada and the United States.
-
Data in Transit (Global Delivery): When you or visitors to your links access our Service, content is delivered through global Content Delivery Networks (CDNs) provided by Cloudflare and BunnyCDN. For the purpose of fast and secure delivery, this means that cached data and analytics information may be processed in or transferred through various countries around the world.
When your information is in a foreign jurisdiction (such as the United States), it is subject to the laws of that country and may be accessible to its governments, courts, or law enforcement agencies. Regardless of where your data is processed, we remain accountable for its protection under Canadian law.
6. Data Security and Retention
We employ robust administrative, technical, and physical security measures to protect your information against loss, theft, and unauthorized access. We retain your personal information only for as long as your account is active or as necessary to fulfill the purposes outlined in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements.
7. Your Rights Under Canadian Privacy Law (PIPEDA)
You have specific rights concerning your personal information under PIPEDA.
- Right to Access: You have the right to request access to the personal information we hold about you. Most of this information is available to you directly within your account settings.
- Right to Correction (Rectification): You have the right to request that we correct any inaccurate or incomplete personal information.
- Right to Withdraw Consent: You can withdraw your consent to our use of your personal information at any time by deleting your account through the account settings page. Please note this will result in the termination of your access to the Service.
- Right to Challenge Compliance: You have the right to challenge our compliance with PIPEDA. We encourage you to contact our Privacy Officer first to resolve any concerns. If your issue is not resolved to your satisfaction, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on our website prior to the change becoming effective. We encourage you to review this policy periodically.
9. Contact Us
For any questions, concerns, or requests related to this Privacy Policy or your personal information, please contact our designated Privacy Officer:
Privacy Officer
Generativo Inc.
1-561 Princess St
Kingston, Ontario, Canada
support@koi.is