Document version: v2026.08.28. If there is any inconsistency between the English and Chinese versions of our legal documents, the English version prevails.
1. Who we are
KoLink Intelligence Limited ("KoLink", "we", "us") operates the KoLink content-rewards platform. Privacy questions: info@getkolink.com.
2. Information you provide
- Account data: name, email, password (stored hashed), account role, and profile information.
- Creator profile: Instagram handle, content categories, follower count, and campaign participation history.
- Brand information: company name, industry, billing contacts, and campaign details.
- KYC / verification: identity or business verification documents and related checks where required before payouts, higher limits, or certain campaign types. Exact fields and providers are listed in our Subprocessor List once confirmed.
- Payout information: bank, FPS, or other payout details required to process creator withdrawals, stored with access controls and encryption appropriate to sensitivity.
- Appeals and support: messages, evidence, and notes you submit in fraud appeals or support requests.
3. Instagram (Meta) data
When you connect Instagram, you authorise KoLink to use the permissions instagram_business_basic and instagram_business_manage_insights. We use this access to verify your account and measure performance of Reels you submit to campaigns.
What we store (for connected creators and submitted Reels):
- Instagram user ID, username, follower count, and profile metadata needed to operate the connection.
- Reel/media identifiers, permalink, and timestamp.
- Authorised Insights metrics such as views/plays, likes, comments, shares, saves, reach, total interactions, and average watch time where returned by the API for submitted content.
- Derived KoLink data: verified view counts, earnings calculations, fraud/integrity signals, sync history, and hourly performance snapshots.
What we do not do: we do not use these permissions to read or manage Instagram direct messages, post on your behalf, or manage comments under the current implementation.
Important: username and public profile information may be publicly visible; Reel Insights are authorised analytics accessed through Meta permissions — not generic "public" data.
Disconnect: Profile → Instagram → Disconnect, or remove KoLink in Instagram → Settings → Website permissions → Apps and websites. See also Data Deletion & Retention.
4. Other third-party sign-in
If you use Google or Apple sign-in, we receive basic profile information (such as name and email) permitted by that provider. Google Search Console may be used for search performance; it does not place marketing analytics cookies on visitors by itself.
5. Information collected automatically
- Security and infrastructure logs: IP address, browser/device type, timestamps, and security events may be recorded by KoLink and providers such as Cloudflare for fraud prevention, abuse detection, and service reliability.
- Authentication: session tokens and related technical data needed to keep you signed in. See Cookie Notice.
We do not currently use advertising pixels, third-party marketing analytics cookies, or behavioural ad trackers on the KoLink product. If that changes, we will update the Cookie Notice and consent controls before deployment.
6. How we use information
- Provide, secure, and improve the platform.
- Operate campaigns, review submissions, calculate earnings, and process withdrawals.
- Detect fraud and enforce platform rules (including automated and human review).
- Send service notifications, security alerts, and important account messages.
- Send direct marketing only where you have given separate channel-specific consent (email, WhatsApp, SMS). Marketing consent is not bundled with Terms acceptance.
- Comply with law, respond to lawful requests, and resolve disputes.
7. AI processing
KoLink may use automated systems (including third-party AI providers such as OpenAI for certain features) to analyse campaign brief compliance, generate creator tools, or support fraud detection. We configure providers to process data only for the stated purpose. Details of what is transmitted are maintained in our Subprocessor List.
8. How we share information
We do not sell personal information. We share data only:
- Between brands and creators for campaign administration and performance reporting.
- With service providers under contractual safeguards.
- For legal, safety, or business-transfer reasons as permitted by law.
9. International processing
Primary systems are hosted in Hong Kong. Some providers may process information in other countries. We use appropriate safeguards required by applicable law.
10. Retention and deletion
See Data Deletion & Retention for deactivation vs permanent deletion, 30-day production deletion targets, 90-day backup cycles, and longer retention for financial, fraud, and legal records.
11. Security
- HTTPS encryption in transit.
- Hashed passwords and restricted access to sensitive fields such as tokens and payout details.
- Internal access controls and security reviews.
12. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, or portability of your personal information, or withdraw marketing consent. Contact info@getkolink.com.
13. Children
Brand and payment users must be 18+. Creator accounts for individuals aged 13–17 require guardian consent under the Minor Creator & Guardian Addendum before earning or withdrawing. We do not knowingly enable under-13 accounts.
14. Changes
We may update this policy and will notify you of material changes by email or in-product notice where appropriate.