Privacy Policy

1. Who this applies to

This policy covers two groups of people: Koosa users (people who create an account and build modals) and end users (visitors to websites that have installed the Koosa SDK). Different data applies to each group, and we explain both below.

2. Information we collect about Koosa users

When you sign up for Koosa, we collect your name and email address through Google OAuth. We do not store your Google password. We only receive what Google provides during sign-in: your name, email, and profile picture.

When you create modals, we store the content you write: titles, body text, call-to-action labels, URLs, and any images or GIFs you upload. This content is tied to your organization and is used solely to serve your modals to your site visitors.

If you subscribe to a paid plan, payment is processed by Stripe. We do not see or store your card number. Stripe provides us with basic billing information such as the last four digits of your card, expiry date, and your billing email.

3. The Chrome extension

The Koosa Chrome extension runs on pages where you have installed the Koosa SDK script. When you open the extension editor on a page, the extension reads the current page URL and sends it to Koosa's API to look up or create a modal for that URL. This is necessary for the editor to work.

When you use the GIF recording feature, the extension captures screenshots of the visible tab. This capture happens only when you actively start a recording. The frames are processed locally in your browser and the resulting GIF is uploaded to Koosa's servers when you save it as part of a modal step. Screenshots are never captured automatically or in the background.

The extension also briefly tracks your mouse position and click locations during an active GIF recording session. This data is used only to draw a cursor and click animations into the GIF frames. It is processed entirely in your browser and is never sent to our servers.

The extension does not collect your browsing history, read the contents of pages you visit, or operate on pages that do not have the Koosa SDK installed.

4. Information about end users of your site

When a visitor lands on a page where you have installed the Koosa SDK, our script fetches the modals configured for that URL using your organization's install token. We do not collect personal information about your site visitors. We do not track individual users, set third-party cookies, or build profiles of people browsing your site.

The SDK stores dismissed modal IDs in the visitor's browser localStorage. This data never leaves their browser and is used only to avoid showing the same modal repeatedly after a visitor has dismissed it.

If your use of Koosa involves collecting data from your own users, you are responsible for your own privacy disclosures and compliance.

5. Cookies and local storage

Koosa uses a session cookie to keep you logged in to the dashboard. This cookie is set when you sign in and cleared when you sign out. We do not use advertising cookies or track you across other websites.

6. How we use your information

• To operate the Koosa service and serve your modals to your site visitors
• To authenticate you and manage your account and organization
• To process payments through Stripe
• To contact you about your account, such as billing issues or important service updates

We do not sell your data. We do not share your data with third parties for advertising purposes.

7. Third-party services

We use a small number of third-party services to run Koosa:

• Google OAuth — for sign-in. Governed by Google's privacy policy.
• Stripe — for payment processing. Governed by Stripe's privacy policy.
• Railway — for hosting the application and database.
• Google Fonts — fonts are loaded in the modal editor UI and in the SDK. No personal data is transmitted beyond a standard browser request for the font file.

8. Data retention

We keep your account data and modal content for as long as your account is active. If you delete your account, we will delete your data within 30 days. Some data may be retained in backups for a short period after deletion.

9. Your rights

You can request a copy of your data, ask us to correct inaccurate information, or ask us to delete your account and associated data. To make any of these requests, email us at the address below.

10. Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page and notify users by email where appropriate. Continued use of Koosa after changes are posted means you accept the updated policy.

11. Contact

Questions about this policy? Email us at getkoosa@gmail.com.