Privacy Policy
1. Introduction & Overview
Welcome to Kandid ("we," "our," or "us"), operated by Kandid Technologies, Inc. We provide a performance-driven creator commerce marketplace that connects verified micro-creators with consumer and direct-to-consumer (DTC) brands.
This Privacy Policy explains how we collect, store, process, transfer, and safeguard your personal information when you visit our website at https://kandidsocial.com, participate in our waitlist, or use our marketplace, escrow payment systems, creator media kits, and performance attribution tools (collectively, the "Services").
Summary of Our Privacy Commitments:
- We never sell or rent your personal data to third-party data brokers.
- We never ask for or store your social media passwords or account credentials.
- Financial transactions and escrow funds are handled through PCI-compliant banking and payment partners.
- You maintain total ownership of your social profile data and may request account deletion at any time.
2. Information We Collect
We collect information you provide directly to us, information collected automatically during your use of the Services, and information authorized via third-party platform integrations.
A. Information You Provide Directly
- Waitlist & Account Registration: Full name, email address, company name (for brands), social media usernames (for creators), creator niche, follower range, and estimated monthly budgets.
- Profile & Media Kit Data: Bio, location, content tags, past collaboration examples, sample UGC videos, rate cards, and profile photos.
- Communication & Deliverables: Messages sent through Kandid, campaign brief specifications, content draft submissions, review notes, and revision feedback.
- Identity & Verification Information: Where required for compliance, tax filings, or fraud prevention, we may collect government ID verification data or tax identification numbers (W-9 / W-8BEN).
B. Information Collected Automatically
- Device & Technical Data: IP address, browser type, operating system version, device identifiers, and language preferences.
- Usage Metrics: Pages viewed, time spent on marketplace listings, interaction timestamps, referral URLs, and click pathways.
3. How We Use Information
We use your personal information strictly for legitimate commercial and operational purposes, including:
Marketplace Matching
Matching brand briefs with authentic micro-creators based on audience demographics, niche fit, and engagement authenticity.
Escrow & Payout Fulfillment
Safely securing brand campaign funds in escrow, locking milestone deliverables, and releasing automatic payouts to creators.
Performance Attribution
Tracking click-through rates, promo code redemptions, Shopify conversions, and per-creator return on ad spend (ROAS).
Fraud & Bot Prevention
Scanning accounts for ghost followers, engagement pod anomalies, and artificial bot traffic to maintain verified marketplace trust.
5. Financial & Escrow Payment Data
To ensure complete protection for both creators and brands, payment handling operates under a dedicated escrow model:
- Payment Card & Bank Details: All credit card, debit card, and ACH banking transactions are processed directly by our PCI-DSS Level 1 certified payment processors (e.g., Stripe, Inc.). Kandid does not store raw credit card numbers or bank security codes on its servers.
- Escrow Protection Architecture: When a brand funds a campaign brief, 100% of the agreed compensation is deposited into an isolated escrow holding account. Funds remain locked until the brand reviews and approves the submitted deliverables, or until escrow dispute resolution is triggered.
- Creator Fee Terms: As part of our launch guarantee, creators pay a 0% platform fee on their first two completed deals (keeping 100% of agreed earnings), followed by a flat 5% platform fee on subsequent deals.
7. Data Security & Storage
We implement robust technical and organizational security controls designed to protect personal data from unauthorized access, accidental loss, alteration, or disclosure.
All communication between your device and Kandid is encrypted in transit using Transport Layer Security (TLS 1.3). Data stored in our production database is encrypted at rest using AES-256 encryption. We regularly conduct security reviews, access audits, and vulnerability scans.
We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with statutory tax and accounting retention requirements, and resolve potential disputes.
8. Your Rights (GDPR & CCPA/CPRA)
Depending on your geographic jurisdiction, you have specific legal rights regarding your personal information:
For European Economic Area (EEA) & UK Users (GDPR)
You have the right to access your data, request rectification of inaccurate data, request erasure ("Right to be Forgotten"), restrict or object to processing, and request data portability. Our lawful bases for processing include contract fulfillment, legitimate interests, and legal compliance.
For California Residents (CCPA / CPRA)
You have the right to know what personal information is collected, request deletion of your information, opt out of any "sale" or "sharing" of personal information (note: Kandid does not sell personal information), and not receive discriminatory treatment for exercising your privacy rights.
To exercise any of these rights, email us at [email protected]. We will respond to verified requests within thirty (30) days.
10. Children’s Privacy
Our Services are not intended for individuals under the age of 18 (or the age of legal majority in your jurisdiction). We do not knowingly collect personal information from children under the age of 13. If we become aware that an individual under 13 has provided personal data, we will immediately delete such information from our records.
11. Changes to This Policy
We may periodically update this Privacy Policy to reflect changes in our platform practices, legal obligations, or new features. When updates are published, we will revise the "Effective Date" at the top of this page. For significant material changes, we will provide prominent notice via email or a platform announcement.
12. Contact Information
If you have questions, feedback, or concerns regarding this Privacy Policy or our data handling practices, please contact our legal and privacy team:
Kandid Technologies, Inc.
Attention: Data Protection & Legal Compliance
Email: [email protected]
General Inquiries: [email protected]
Website: https://kandidsocial.com
Ready to collaborate safely?
Join the waitlist to access verified micro-creators with 100% escrow protection.
4. Social Platform Integrations & APIs
Kandid allows creators to connect third-party accounts (Instagram, TikTok, YouTube) via official OAuth authorization flows.
Kandid connects to social platforms exclusively through official developer APIs (Meta Graph API, TikTok for Developers, YouTube Data API). We never request, receive, or store your social account passwords. Tokens are stored securely using industry-standard AES-256 encryption.
Data retrieved via official platform APIs is limited to public audience statistics, engagement rates, follower demographics, and post performance metrics necessary to generate your verified media kit and compute audience authenticity scores. You may revoke Kandid's access at any time directly through your Instagram, TikTok, or Google security settings.