Privacy Policy

Sodai Labs Co., Ltd. ("KolHunt", "we", "us") is the data controller for personal data collected through the KolHunt platform. Contact our Data Protection Officer at privacy@kolhunt.io.

2.1 Brand Users (Account Holders)

• Email address and name (for account creation)
• Business name and company information
• Payment information (processed by Stripe, not stored by us)
• Usage data: searches, saved creators, campaign activity
• Device and browser information via cookies

2.2 Creator Profiles

• Publicly available social media profile data
• Engagement metrics (followers, views, likes) from public sources
• AI-generated content analysis (category, topics, tone)
• Quality and authenticity scores

2.3 Claimed Creator Accounts

• Email address and contact preferences
• Rate card and availability information
• Banking information (for payment processing)

We process personal data based on:

• Consent — Account creation, marketing communications
• Contract performance — Providing the Service to subscribers
• Legitimate interest — Compiling publicly available creator data for marketplace purposes, fraud prevention, service improvement
• Legal obligation — Tax records, regulatory compliance

• Providing and improving the influencer discovery Service
• AI-powered creator-brand matching and recommendations
• Fraud detection and audience quality analysis
• Campaign analytics and ROI tracking
• Customer support and communications
• Platform security and abuse prevention
• Aggregated, anonymized analytics for industry insights

We share data only with:

• Service providers — Supabase (database), OpenAI (AI analysis), Scrapfly (data collection), Vercel (hosting), Resend (email)
• Brand users — Creator profiles visible to authenticated platform users
• Legal authorities — When required by Thai law or court order

We do not sell personal data to third parties.

• Account data — Retained while account is active, deleted within 90 days of account closure
• Creator profiles — Retained while publicly available; removed upon creator request
• Campaign data — Retained for 2 years after campaign completion
• Payment records — Retained for 5 years per Thai tax law

As a data subject, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate data
• Erasure — Request deletion of your data
• Restriction — Limit processing of your data
• Portability — Receive your data in a structured format
• Objection — Object to processing based on legitimate interest
• Withdraw consent — Withdraw previously given consent

To exercise these rights, contact privacy@kolhunt.io. We will respond within 30 days.

Creators whose profiles appear on KolHunt can request removal at any time by emailing privacy@kolhunt.io with their platform username. We will remove the profile within 14 business days.

We use cookies for:

• Essential cookies — Authentication, session management (required)
• Analytics cookies — Google Analytics for understanding usage patterns (optional)

You can manage cookie preferences in your browser settings.

We implement appropriate technical measures including encryption in transit (TLS), encrypted storage, role-based access controls, and regular security reviews. Data is hosted on Supabase (Singapore region) and Vercel infrastructure.

Some data may be processed by service providers outside Thailand (OpenAI in the US, Vercel globally). We ensure adequate safeguards through service provider agreements that meet PDPA requirements.

KolHunt is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us immediately.

We may update this policy periodically. Material changes will be communicated via email or in-app notice at least 30 days before taking effect. The latest version is always available at kolhunt.io/privacy.

For privacy-related inquiries:

• Data Protection Officer: privacy@kolhunt.io
• General inquiries: Contact form