01 / Scope
This Policy covers Kiko’s public services.
This Privacy Policy applies to kiko.so (the “Site”), the Kiko launch list, and the Kiko Discord application (the “Discord App”). It does not replace Discord’s privacy policy or the policies of websites and services reached through third-party links.
A future Kiko account, wallet, or financial product may require additional information and a supplemental privacy notice. That information will not be collected through the current public Site or Discord App without notice appropriate to the feature.
02 / Information collected
Only information needed to run the requested feature.
Information you provide
Your email address, confirmation and consent status, and associated timestamps. The address is encrypted at rest and paired with a non-reversible tag used to prevent duplicate registrations.
Application data
Server, channel, category, role, application, and user identifiers; relevant names; permission configuration; command or interaction input; and the result of an authorized action.
Request and device data
Internet Protocol address, request time, requested path, response status and size, browser or device information, and referral information may appear in infrastructure security and access logs.
Session-only state
The Site may store a short list of recently shown Kiko message identifiers in session storage so the same visual message is not repeated. It disappears when the browser session ends.
The Discord App does not request wallet private keys, seed phrases, passwords, or authentication codes. It does not broadly collect Discord message content. If a person submits text directly through a command or support interaction, that text is processed only to respond to the request, keep the system safe, or meet a legal obligation.
The Site does not use third-party advertising analytics, advertising cookies, or tracking pixels. Public blockchain activity is inherently visible to others, but the current public Site and Discord App do not connect a wallet or associate a blockchain address with a launch-list email.
03 / How information is used
Data supports a defined operational purpose.
- Confirm and administer the launch list and send requested Kiko updates.
- Authenticate and perform Discord actions authorized by a server administrator or interacting user.
- Maintain channel configuration, permissions, reliability, and auditability.
- Prevent spam, abuse, fraud, unauthorized access, and service disruption.
- Diagnose failures, measure service health, and improve accessibility and usability.
- Respond to support, privacy, security, and legal requests.
- Comply with law and enforce the Terms of Service.
Kiko does not use personal information to train a public artificial-intelligence model, determine creditworthiness, sell advertising, or make an automated decision that produces a legal or similarly significant effect.
04 / Legal bases
Where required, processing rests on a recognized basis.
Depending on location and context, Kiko processes information with your consent (such as joining the launch list), to perform a service you requested, for legitimate interests in operating and securing Kiko that do not override your rights, or to comply with legal obligations.
You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal or processing supported by another lawful basis.
06 / Retention
Different records expire on different schedules.
- Launch-list registry records are configured to expire within 24 months of submission. Necessary operational copies may remain until the launch list ends or a verified deletion request is completed.
- Email-confirmation links expire after seven days.
- Application and API diagnostic logs are ordinarily retained for up to 90 days.
- Website and infrastructure access logs are ordinarily retained for up to 180 days.
- Browser session storage ordinarily ends when the browser session closes.
- Discord configuration and identifiers are kept only while needed to provide the installed feature, resolve abuse or support matters, or meet legal obligations. They are deleted or de-identified when no longer needed.
Backups, fraud-prevention records, and records subject to a legal hold may remain for a limited additional period. Kiko will delete Discord API data sooner when Discord or an applicable user validly requests deletion and continued retention is not required by law.
07 / Security
Protection is layered, but no system is infallible.
Kiko uses controls designed to limit access and reduce exposure, including encryption in transit and at rest, restricted service permissions, request validation, rate limits, security filtering, bounded logs, and separation between the public Site and private operational systems.
No internet, cloud, email, Discord, or blockchain system can be guaranteed completely secure. Do not send secrets through the Site or Discord App. If you believe Kiko has a security or privacy issue, contact privacy@kiko.so.
08 / International transfers
Infrastructure may process data across borders.
Kiko and its service providers may process information in countries other than the one where you live. Those countries may have different data-protection laws. Where required, Kiko uses contractual or other recognized safeguards and limits transfers to information needed for the relevant service.
09 / Your choices and rights
You can ask what Kiko holds and what happens next.
Depending on applicable law, you may have rights to access, correct, delete, or receive a copy of personal information; restrict or object to processing; withdraw consent; opt out of sale or targeted-advertising sharing; appeal a denied request; and complain to a data-protection authority. Kiko will not discriminate against you for exercising a privacy right.
To leave the launch list or submit a privacy request, email privacy@kiko.so. Describe the service involved and the right you want to exercise. Kiko may request proportionate information to verify that the request concerns you or a server you are authorized to manage.
Removing the Discord App through Discord prevents future server access. A server administrator may also reduce permissions at any time. Browser controls can clear session storage. Because Kiko does not sell personal information or use it for targeted advertising, there is no sale or advertising-sharing opt-out required for the current services.
10 / Children
Kiko is intended for adults.
The Site and Discord App are not directed to children under 18, and Kiko does not knowingly collect personal information from children. If you believe a child submitted information, contact privacy@kiko.so so it can be reviewed and deleted as appropriate.
11 / Changes
The effective date identifies the current policy.
Kiko may update this Policy when services, data practices, providers, or legal requirements change. Material changes will be communicated through a reasonable channel when required. A new feature that materially expands Discord or financial-product data collection will receive an updated or supplemental notice before that collection begins.
12 / Contact
Privacy requests have a dedicated channel.
Contact privacy@kiko.so for questions, requests, or concerns about this Policy or Kiko’s handling of personal information.