Legal Document

Privacy Policy

Last updated: May 26, 2026

This Privacy Policy explains how Reviews Kokobeo collects, uses, shares, and protects your personal data when you use our Service. We comply with the EU General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

1. Data Controller

Joint Controllers: Goldman Services INC (175 West Beaver Creek Rd Unit 10, Richmond Hill, ON L4B 3M1, Canada) and Europe Services SE (IČO 03571785, Na Čeličičce 425/4, Smíchov, 150 00 Praha, Czech Republic). Contact: privacy@kokobeo.com.

2. Data We Collect

Account Data: name, email, password (hashed), language preference, company name. Billing Data: VAT number, billing address, payment method (processed by Mollie). Service Data: review profile URLs, monitored platforms, removal requests, scan results. Technical Data: IP address, browser type, device type, OS, pages visited, referrer URL, timestamps. Communications: emails, support tickets, chat messages. Cookies: as described in our Cookie Policy.

3. Legal Basis for Processing (GDPR Art. 6)

Contract performance: providing the Service you subscribed to. Legitimate interests: fraud prevention, security, analytics, improving the Service. Legal obligation: tax law, anti-money laundering, court orders. Consent: marketing communications, optional analytics cookies.

4. How We Use Your Data

To provide and operate the Service. To process payments and issue invoices. To detect fake reviews using AI. To submit legal removal requests to platforms. To communicate updates, alerts, and support. To improve the Service and develop new features. To comply with legal obligations. To prevent fraud and abuse.

5. Data Sharing

We do not sell your personal data. We share data only with: (a) Service providers under contract: Mollie (payments), AWS (hosting, email), MongoDB Atlas (database), OpenAI (AI processing - anonymized review content only); (b) Review platforms (Google, TripAdvisor, Trustpilot, Booking, Facebook, Yelp) for removal requests; (c) Legal advisors (under attorney-client privilege) for escalation; (d) Regulatory authorities when legally required.

6. International Data Transfers

Data may be transferred to countries outside the EEA. Such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, or other appropriate safeguards. Specifically: AWS data centers in eu-north-1 (Stockholm, EU); OpenAI processing under SCCs; servers also located in EU (Contabo, Germany).

7. Data Retention

Account data: until account deletion + 30 days backup. Billing data: 10 years (tax obligation). Service data: 24 months from last interaction. Marketing data: until consent withdrawn. Anonymized analytics: indefinitely.

8. Your Rights (GDPR & CCPA)

Right of access: request a copy of your data. Right to rectification: correct inaccurate data. Right to erasure (right to be forgotten): request deletion. Right to restriction: limit processing. Right to portability: receive data in machine-readable format. Right to object: refuse certain processing. Right to withdraw consent. Right not to be subject to automated decisions. CCPA: right to know, right to delete, right to opt-out of sale (we do not sell). Exercise rights: privacy@kokobeo.com. Response within 30 days.

9. Security Measures

All data transmitted via TLS 1.3 encryption. Passwords hashed with bcrypt (10 rounds). Database access restricted by IP whitelist and authentication. Regular security audits. Employee access on need-to-know basis. Incident response plan in place. Breach notification to authorities within 72 hours where required.

10. Cookies and Tracking

See our separate Cookie Policy for full details. You can manage cookie preferences anytime from the cookie banner or your account settings.

11. Children Privacy

The Service is not directed to individuals under 18. We do not knowingly collect data from minors. If you believe a minor has provided data, contact privacy@kokobeo.com for deletion.

12. Changes to this Policy

Material changes will be notified via email at least 30 days before taking effect. The Last updated date reflects the most recent revision.

13. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. EU: your local Data Protection Authority. Czech Republic: Office for Personal Data Protection (ÚOOÚ, www.uoou.cz). Canada: Office of the Privacy Commissioner of Canada (www.priv.gc.ca).

14. Contact Us

Data Protection Officer: privacy@kokobeo.com. Postal: Europe Services SE, Na Čeličičce 425/4, Smíchov, 150 00 Praha, Czech Republic.

Reviews Kokobeo

Operated by Goldman Services INC & Europe Services SE

Goldman Services INC · 175 West Beaver Creek Rd Unit 10, Richmond Hill, ON L4B 3M1, Canada

Europe Services SE · IČO 03571785, Na Čeličičce 425/4, Smíchov, 150 00 Praha, Czech Republic

Kokobeo® registered trademark · UK Reg. UK00004201811 · EU Reg. 019185279

📧 legal@kokobeo.com · 📞 +1 (438) 900-4620

© 2026 Operated by Goldman Services INC & Europe Services SE

We use cookies

We use essential cookies for site operation and optional cookies to improve experience and analyze usage. You can accept all, reject optional, or manage your preferences. Learn more in our Cookie Policy