Kandid Trust & Legal Center

Privacy Policy

Effective Date: October 6, 2026•Organization: Kandid Technologies, Inc.•GDPR & CCPA Compliant

1. Introduction & Overview

Welcome to Kandid ("we," "our," or "us"), operated by Kandid Technologies, Inc. We provide a performance-driven creator commerce marketplace that connects verified micro-creators with consumer and direct-to-consumer (DTC) brands.

This Privacy Policy explains how we collect, store, process, transfer, and safeguard your personal information when you visit our website at https://kandidsocial.com, participate in our waitlist, or use our marketplace, escrow payment systems, creator media kits, and performance attribution tools (collectively, the "Services").

Summary of Our Privacy Commitments:

  • We never sell or rent your personal data to third-party data brokers.
  • We never ask for or store your social media passwords or account credentials.
  • Financial transactions and escrow funds are handled through PCI-compliant banking and payment partners.
  • You maintain total ownership of your social profile data and may request account deletion at any time.

2. Information We Collect

We collect information you provide directly to us, information collected automatically during your use of the Services, and information authorized via third-party platform integrations.

A. Information You Provide Directly

  • Waitlist & Account Registration: Full name, email address, company name (for brands), social media usernames (for creators), creator niche, follower range, and estimated monthly budgets.
  • Profile & Media Kit Data: Bio, location, content tags, past collaboration examples, sample UGC videos, rate cards, and profile photos.
  • Communication & Deliverables: Messages sent through Kandid, campaign brief specifications, content draft submissions, review notes, and revision feedback.
  • Identity & Verification Information: Where required for compliance, tax filings, or fraud prevention, we may collect government ID verification data or tax identification numbers (W-9 / W-8BEN).

B. Information Collected Automatically

  • Device & Technical Data: IP address, browser type, operating system version, device identifiers, and language preferences.
  • Usage Metrics: Pages viewed, time spent on marketplace listings, interaction timestamps, referral URLs, and click pathways.

3. How We Use Information

We use your personal information strictly for legitimate commercial and operational purposes, including:

Marketplace Matching

Matching brand briefs with authentic micro-creators based on audience demographics, niche fit, and engagement authenticity.

Escrow & Payout Fulfillment

Safely securing brand campaign funds in escrow, locking milestone deliverables, and releasing automatic payouts to creators.

Performance Attribution

Tracking click-through rates, promo code redemptions, Shopify conversions, and per-creator return on ad spend (ROAS).

Fraud & Bot Prevention

Scanning accounts for ghost followers, engagement pod anomalies, and artificial bot traffic to maintain verified marketplace trust.

4. Social Platform Integrations & APIs

Kandid allows creators to connect third-party accounts (Instagram, TikTok, YouTube) via official OAuth authorization flows.

Strict Zero-Password Policy

Kandid connects to social platforms exclusively through official developer APIs (Meta Graph API, TikTok for Developers, YouTube Data API). We never request, receive, or store your social account passwords. Tokens are stored securely using industry-standard AES-256 encryption.

Data retrieved via official platform APIs is limited to public audience statistics, engagement rates, follower demographics, and post performance metrics necessary to generate your verified media kit and compute audience authenticity scores. You may revoke Kandid's access at any time directly through your Instagram, TikTok, or Google security settings.

5. Financial & Escrow Payment Data

To ensure complete protection for both creators and brands, payment handling operates under a dedicated escrow model:

  • Payment Card & Bank Details: All credit card, debit card, and ACH banking transactions are processed directly by our PCI-DSS Level 1 certified payment processors (e.g., Stripe, Inc.). Kandid does not store raw credit card numbers or bank security codes on its servers.
  • Escrow Protection Architecture: When a brand funds a campaign brief, 100% of the agreed compensation is deposited into an isolated escrow holding account. Funds remain locked until the brand reviews and approves the submitted deliverables, or until escrow dispute resolution is triggered.
  • Creator Fee Terms: As part of our launch guarantee, creators pay a 0% platform fee on their first two completed deals (keeping 100% of agreed earnings), followed by a flat 5% platform fee on subsequent deals.

6. Information Sharing & Third Parties

We do not sell, rent, or trade your personal data. We disclose your information only in the limited circumstances described below:

  • Between Brands & Creators: When a campaign brief is matched, mutual collaboration details (profile links, agreed rates, media kits, deliverables, and Ad Spark/Partnership authorization codes) are shared between the parties to facilitate campaign execution.
  • Service Providers: We work with trusted vendors who perform operational services on our behalf (cloud hosting, database management, fraud screening, email delivery, and analytics). These providers are bound by strict contractual confidentiality agreements.
  • Legal & Regulatory Compliance: We may disclose information if required by applicable law, court order, subpoena, or governmental regulation to protect the rights, property, or safety of Kandid, our users, or the public.

7. Data Security & Storage

We implement robust technical and organizational security controls designed to protect personal data from unauthorized access, accidental loss, alteration, or disclosure.

All communication between your device and Kandid is encrypted in transit using Transport Layer Security (TLS 1.3). Data stored in our production database is encrypted at rest using AES-256 encryption. We regularly conduct security reviews, access audits, and vulnerability scans.

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with statutory tax and accounting retention requirements, and resolve potential disputes.

8. Your Rights (GDPR & CCPA/CPRA)

Depending on your geographic jurisdiction, you have specific legal rights regarding your personal information:

For European Economic Area (EEA) & UK Users (GDPR)

You have the right to access your data, request rectification of inaccurate data, request erasure ("Right to be Forgotten"), restrict or object to processing, and request data portability. Our lawful bases for processing include contract fulfillment, legitimate interests, and legal compliance.

For California Residents (CCPA / CPRA)

You have the right to know what personal information is collected, request deletion of your information, opt out of any "sale" or "sharing" of personal information (note: Kandid does not sell personal information), and not receive discriminatory treatment for exercising your privacy rights.

To exercise any of these rights, email us at [email protected]. We will respond to verified requests within thirty (30) days.

9. Cookies & Local Storage

We use cookies and local storage technologies to maintain your authenticated sessions, remember theme preferences (light/dark mode), preserve waitlist submission status, and analyze aggregated marketplace traffic trends.

You can configure your browser to reject cookies or alert you when cookies are being sent. Note that certain interactive marketplace features may not operate properly if essential cookies are disabled.

10. Children’s Privacy

Our Services are not intended for individuals under the age of 18 (or the age of legal majority in your jurisdiction). We do not knowingly collect personal information from children under the age of 13. If we become aware that an individual under 13 has provided personal data, we will immediately delete such information from our records.

11. Changes to This Policy

We may periodically update this Privacy Policy to reflect changes in our platform practices, legal obligations, or new features. When updates are published, we will revise the "Effective Date" at the top of this page. For significant material changes, we will provide prominent notice via email or a platform announcement.

12. Contact Information

If you have questions, feedback, or concerns regarding this Privacy Policy or our data handling practices, please contact our legal and privacy team:

Kandid Technologies, Inc.

Attention: Data Protection & Legal Compliance

Email: [email protected]

General Inquiries: [email protected]

Website: https://kandidsocial.com

Ready to collaborate safely?

Join the waitlist to access verified micro-creators with 100% escrow protection.

Join Waitlist