Privacy Policy — Draft for Review | Kizmio | Connect, Share & Discover Worldwide

Document status: working draft. The data inventory, controller identity, legal bases, retention periods, rights process, recipients, and contact details have not been verified or approved. This draft is not a statement of current data practices.

1. Data controller and contact — required details

Identify the legal entity or person responsible for Kizmio, its jurisdiction, a privacy contact, and any applicable representative. These details must be confirmed before the service collects account information.

2. Data inventory — verify against the live service

Review whether the service processes account identifiers and authentication records; profile information; posts, comments, reactions, messages, and media; support requests; device, network, and security logs; and cookie or session data. This list is a review checklist, not a claim that every category is currently collected.

3. Purposes and legal basis — decision required

For every confirmed data category, document the specific service, security, support, or legal purpose, the applicable legal basis, and whether the information is optional. Obtain legal review for consent, children’s data, sensitive information, and direct marketing.

4. Sharing and service providers — verify

List each processor, recipient, hosting provider, email provider, and other party that receives personal data; state its purpose and relevant safeguards. Confirm the actual production configuration before naming providers or describing transfers.

5. Retention, access, and deletion

Set retention periods or objective criteria for account, content, message, log, backup, and support data. Document how access, correction, export, objection, and deletion requests will be authenticated and handled, including lawful exceptions and backup expiry.

6. Security, cookies, and international transfers

Describe only verified safeguards. Inventory cookies and similar technologies, state their purposes and choices, and identify any international transfers and safeguards. Legal review must determine any required notices or consent controls.

7. Children, policy changes, and complaints

Define the service’s approved age policy and response to child accounts. Specify how material policy changes will be communicated and identify the relevant regulator or complaint route only after jurisdiction and controller details are confirmed.