Privacy Policy

1. Introduction

This Privacy Policy governs IdeaKoi ("Platform", "we", "us"), a marketplace for buying and selling digital idea listings. By accessing or using the Platform, you agree to the collection and use of information described in this Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

Account information: your name, email address, and password hash (for credentials-based sign-in via NextAuth) or your identity as provided by an OAuth provider, along with your role on the Platform (buyer, seller, or admin).

Seller onboarding data: when a seller enrolls for payouts, Stripe Connect Express collects identity verification (KYC), bank account, and tax details directly during its hosted onboarding flow. IdeaKoi does not directly collect or store bank account numbers, government ID, or tax details — this information is collected and held by Stripe on our behalf.

Idea listing content: titles, descriptions, pricing, and uploaded asset files submitted by sellers.

Transaction and purchase history: records of listings purchased, amounts paid, and order status.

Communications: messages you send through the Platform, including support requests.

Technical data: IP address, browser and device information, and standard server logs generated as you use the Platform.

3. Payment Information

IdeaKoi does not store your credit or debit card numbers. All payment processing is handled by Stripe using Stripe Connect destination charges, and Stripe's own privacy policy governs the card data Stripe collects on our behalf. IdeaKoi retains only transaction metadata — such as amount, status, Stripe payment/session identifiers, and the platform commission split — needed to fulfill and record each sale.

4. How We Use Your Information

We use the information we collect to operate the marketplace (listing and discovering ideas), process purchases and route seller payouts through Stripe Connect, gate and deliver purchased digital asset files via time-limited signed download links to the verified buyer of that listing, run the admin moderation and approval queue for new and edited listings, enable buyer reviews and ratings after a completed purchase, detect fraud and prevent abuse, and communicate service-related notices such as order confirmations, moderation decisions, and support responses.

5. Data Sharing and Third Parties

We share information with Stripe for payment processing, seller payouts, and KYC/identity verification tied to Connect accounts, and with our cloud storage providers (including S3 and/or Cloudinary) used to host idea asset files.

IdeaKoi does not sell your personal data to third parties and does not use third-party advertising or analytics trackers. We currently deploy no third-party analytics or advertising cookies — only essential session cookies required for authentication (a NextAuth session cookie for web login, and a bearer token for API/mobile access) are used.

6. Cookies

Today, IdeaKoi uses only essential, strictly-necessary cookies for authentication and session management. No analytics, advertising, or tracking cookies are currently deployed. Should this change in the future — for example, if analytics tooling is added — we will update this Policy and provide notice.

7. Data Retention

Account and transaction records are retained for as long as your account is active and as needed to comply with financial and tax recordkeeping obligations tied to Stripe transactions. Idea listing content and asset files are retained according to the seller's account status and applicable purchase/delivery obligations to buyers. We may retain data longer where required by law or to resolve disputes.

8. Your Rights

You may request access to, correction of, or deletion of your personal data, subject to our need to retain transaction records for legal and financial compliance and to honor already-completed purchases. To make a request, contact us using the details below.

9. Data Security

We use reasonable technical and organizational measures to protect your personal data, including gated, signed-URL access to purchased asset files (never public or permanent links) and reliance on Stripe's PCI-compliant infrastructure for payment data. No method of transmission or storage is 100% secure.

10. Children's Privacy

The Platform is not directed to individuals under 18, and IdeaKoi does not knowingly collect data from minors.

11. Changes to This Policy

IdeaKoi may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date on this page.