Privacy Policy

Information you provide

When you create an account, we collect your name, email address, and authentication credentials (managed by Clerk, our authentication provider). When you set up payout methods, we collect the relevant details such as PayPal email, Venmo handle, bank routing and account numbers, or cryptocurrency wallet addresses.

Information collected automatically

When you use Kona, we automatically collect: device and browser information, IP address, pages visited, clickstream data (which stores and links you interact with), and referral sources. This data is used to operate the cashback tracking system, detect fraud, and improve the Service.

Information from third parties

We receive transaction confirmation data from our merchant partners and affiliate networks, including purchase amounts, order IDs, and commission amounts. If you sign in via Coinbase or MetaMask, we receive basic profile information from those providers as authorized by you.

We use the information we collect to: operate and provide the cashback service; track and credit cashback earnings; process withdrawals and payouts; communicate with you about your account, earnings, and promotions; detect and prevent fraud, abuse, and unauthorized access; comply with legal obligations; and improve and develop the Service.

We do not sell your personal information. We share information only in these limited circumstances:

Service providers: We share data with companies that help us operate the Service, including Clerk (authentication), Supabase (database hosting), and payment processors. These providers are contractually obligated to protect your data.

Merchant partners: We share limited transaction data with merchants to facilitate cashback tracking and resolve disputes. This does not include your financial account information.

Legal requirements: We may disclose information if required by law, regulation, legal process, or government request.

Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

Kona uses cookies and similar technologies to: maintain your logged-in session; track cashback-eligible purchases through affiliate links; remember your preferences; and analyze site usage and performance.

Affiliate tracking cookies are essential to our service — they allow merchants to attribute purchases to Kona so you can earn cashback. Disabling these cookies may prevent cashback from being tracked.

We may use third-party analytics services (such as Google Analytics) to understand how the Service is used. These services may collect information about your browsing activity across websites.

We implement appropriate technical and organizational measures to protect your information, including encryption of data in transit and at rest, secure authentication through Clerk, and regular security assessments. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

We never store your complete bank account numbers, credit card numbers, or cryptocurrency private keys. Payout credentials are stored securely and used only for processing your requested withdrawals.

We retain your account information for as long as your account is active. Transaction history is retained for a minimum of 7 years to comply with financial record-keeping requirements. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law.

Depending on your jurisdiction, you may have the right to: access the personal information we hold about you; correct inaccurate information; delete your account and associated data; export your data in a portable format; opt out of promotional communications; and restrict or object to certain processing of your data.

To exercise any of these rights, contact us at support@withkona.com. We will respond to your request within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. As stated above, we do not sell personal information.

To make a CCPA request, contact us at support@withkona.com with the subject line "CCPA Request."

Kona is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will take steps to delete it promptly.

Kona is operated in the United States. If you access the Service from outside the US, your information may be transferred to and processed in the United States. By using the Service, you consent to this transfer.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending you an email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

For questions about this Privacy Policy or your personal data, contact us at support@withkona.com.