Privacy Policy

At KPaja, we respect the privacy of our users. This Privacy Policy explains what information we may collect, how we use it, how we protect it, and under what circumstances we may share it.

By using KPaja, you agree to the practices described in this Privacy Policy.

1. Who Is Responsible for the Information?

KPaja is responsible for the operation and administration of the platform and for the processing of information collected through its services, in accordance with applicable law.

This Policy applies to information collected through our website, user accounts, features, services, and related systems.

2. Information We Collect

The amount and nature of the information collected depends on how you use KPaja.

2.1. Information Provided by the User

When you create an account or use certain features, we may collect information such as:

• Email address.

• Username or alias.

• Password stored using appropriate security mechanisms.

• Information voluntarily provided in your profile.

• Content you choose to publish.

• Information provided when contacting support.

• Information provided when submitting reports.

KPaja does not require a user's public username to correspond to their legal name.

We do not deliberately request personal information that is not necessary to provide the applicable features.

3. Technical Information

When you use KPaja, certain technical data may be automatically recorded.

Depending on the features used, this may include:

• IP address.

• Date and time of access.

• Browser.

• Operating system.

• Device type.

• Technical connection information.

• Referring URL, when available.

• Error and security-related logs.

• Session-related information.

• Relevant actions performed within the account.

This data may be collected regardless of whether the user provides their real name.

4. IP Addresses and Access Logs

KPaja may retain IP addresses and records related to access to the platform.

These records may be used to:

• Detect unauthorized access.

• Protect accounts.

• Prevent fraud.

• Prevent spam and abuse.

• Investigate violations of the Terms.

• Investigate security incidents.

• Protect other users.

• Investigate potentially illegal activities.

• Comply with legal obligations.

An IP address does not necessarily allow a person to be unequivocally identified, particularly when mobile networks, NAT, VPNs, proxies, or other technologies are used.

5. Information Related to Content

When you publish photographs, videos, comments, or other content, KPaja processes the information necessary to store, process, display, and distribute such content within the platform's features.

This may include:

• The uploaded file.

• Thumbnails.

• Technical metadata.

• Publication date.

• Information associated with the user who submitted the content.

• Information necessary for moderation and security.

KPaja may perform technical transformations of content, such as resizing, compression, format conversion, or thumbnail generation.

6. Messages and Communications

When you use communication features between users, KPaja processes the information necessary to provide those features.

Messages are intended to be private communications between the participants.

However, no communication made through an Internet platform should be considered absolutely confidential against circumstances such as:

• User reports.

• Security investigations.

• Abuse prevention.

• Platform-related incidents.

• Legal obligations.

• Valid requests from competent authorities.

KPaja may preserve or access information related to communications when there is a legitimate, proportionate reason to do so that is consistent with applicable law.

7. How Do We Use Your Information?

We may use the information collected for the following purposes:

Platform Operation

• Create and manage accounts.

• Authenticate users.

• Maintain sessions.

• Display profiles and content.

• Process photographs and videos.

• Provide social features.

• Manage Premium services.

Security

• Detect suspicious access.

• Prevent fraud.

• Detect abuse.

• Combat spam.

• Investigate vulnerabilities.

• Protect infrastructure.

Moderation

• Review reports.

• Investigate potential violations.

• Moderate content.

• Apply restrictions.

• Suspend or block accounts when appropriate.

Communications

• Confirm accounts.

• Recover passwords.

• Send service-related notifications.

• Inform users about important changes.

• Send communications requested by the user.

Legal Obligations

We may process and retain information when necessary to comply with legal obligations, respond to valid requests from authorities, or protect the legitimate rights and interests of KPaja, its users, or third parties.

8. Emails

We may use the email address associated with an account to send communications necessary for the operation of the service, including:

• Account confirmation.

• Password recovery.

• Security alerts.

• Important service changes.

• Account-related information.

• Notifications requested by the user.

We may also send communications related to platform activity when permitted by applicable law.

When a communication is promotional and applicable law requires consent or an opt-out mechanism, we will provide the appropriate means to do so.

9. Cookies and Similar Technologies

KPaja may use cookies and similar technologies to:

• Maintain logged-in sessions.

• Remember certain preferences.

• Maintain essential functions.

• Analyze platform performance.

• Improve the user experience.

• Prevent fraud and abuse.

• Display or measure advertising where applicable.

Some cookies may be managed by third-party providers.

You can configure your browser to block certain cookies, although doing so may affect some functionality of the website.

10. Advertising

KPaja may use advertising services provided by third parties.

These providers may use certain technologies, such as cookies, identifiers, or other mechanisms, in accordance with their own policies.

KPaja does not necessarily control information collected directly by advertising providers.

Advertising may vary based on factors such as the content visited, approximate location, device, or information provided through advertising technologies.

11. Third-Party Services

KPaja may use external providers for certain functions, including:

• Hosting.

• File storage.

• Video processing.

• Image processing.

• Email delivery.

• Payment processing.

• Advertising.

• Security.

• Technical analytics.

• Fraud prevention.

These providers may process information on our behalf when necessary to provide their services.

Third-party providers may also be subject to their own policies and terms.

12. Payments

When you make a purchase, payment processing may be carried out through third-party providers.

KPaja does not necessarily store complete bank card information.

Depending on the payment method used, the relevant provider may collect and process information necessary to complete the transaction, prevent fraud, and comply with its legal obligations.

Purchase-related information may include:

• Product or plan purchased.

• Amount.

• Date.

• Transaction status.

• Transaction identifier.

• Information necessary to handle disputes or claims.

13. Illegal Content and User Safety

KPaja strictly prohibits illegal content and, in particular, any child sexual abuse or exploitation material.

When we receive a report or detect a potential serious violation, we may:

• Restrict the content.

• Suspend the associated account.

• Block certain features.

• Preserve relevant information.

• Record technical information related to the incident.

• Take other reasonable measures to protect users and the platform.

Where there is a legal obligation or a valid request from a competent authority, KPaja may provide information as legally required.

14. Disclosure of Information

KPaja does not knowingly sell users' personal information to third parties for purposes incompatible with this Policy.

We may share information when necessary with:

Service Providers

When a provider needs to process information in order to provide a service to KPaja.

Security

When necessary to investigate fraud, abuse, attacks, unauthorized access, or other threats.

Legal Obligations

When there is a legal obligation, court order, valid request from a competent authority, or when disclosure is necessary to comply with a legal obligation.

Protection of Rights

When necessary to protect the rights, safety, or property of KPaja, its users, or third parties.

Corporate Transactions

In the event of a reorganization, acquisition, merger, asset sale, or similar transaction, certain information may be transferred as part of such transaction, subject to applicable legal obligations.

15. Requests from Authorities

When a competent authority requests information related to an account, KPaja may preserve and provide the available information that is legally required or permitted.

Depending on the circumstances and the information we retain, this may include:

• Email address associated with the account.

• Username.

• IP address.

• Dates and times of access.

• Technical information.

• Security records.

• Information related to content or actions performed through the account.

KPaja does not guarantee that it will have sufficient information to personally identify a user.

Where permitted by law, KPaja may notify the user about an information request unless there is a legal prohibition or security reason preventing such notification.

16. Data Retention

We retain information for the period reasonably necessary to:

• Provide our services.

• Maintain security.

• Resolve disputes.

• Prevent fraud and abuse.

• Comply with legal obligations.

• Respond to legitimate requests.

• Maintain backups.

• Defend our rights.

Retention periods may vary depending on the nature of the information.

For example, certain technical records may be retained for a different period than published content or information necessary to manage an account.

When information is no longer necessary, we may delete it, anonymize it, or remove its direct association with an account, subject to our legal and technical obligations.

17. Information Security

We implement reasonable measures designed to protect information against unauthorized access, loss, alteration, disclosure, or destruction.

These measures may include:

• Encryption of communications.

• Password protection.

• Administrative access controls.

• Audit logs.

• Abuse detection and prevention systems.

• Restricted access to sensitive information.

However, no system connected to the Internet can guarantee absolute security.

Therefore, we cannot guarantee that information will never be compromised due to attacks, technical failures, or other circumstances beyond our reasonable control.

18. Administrative Access and Auditing

Administrative access to user information is limited, to the extent reasonably possible, to functions necessary to administer, maintain, and protect the platform.

Relevant administrative actions may be recorded through auditing mechanisms.

These records may be used to investigate unauthorized access, administrative abuse, security incidents, or complaints related to the platform.

19. Account Deletion

You may request deletion of your account when the corresponding functionality is available.

Deleting an account does not necessarily result in the immediate deletion of all associated information.

Certain information may be retained for a reasonably necessary period when:

• There is a legal obligation to retain it.

• It is necessary to resolve a dispute.

• It is necessary to investigate fraud or abuse.

• It is necessary to protect the security of the platform.

• It forms part of backups.

• There is a valid request from a competent authority.

Where possible, information that is no longer necessary may be deleted, anonymized, or disconnected from the account.

20. User Rights

Depending on applicable law, users may have rights relating to their personal data, including:

• Access to certain data.

• Correction of inaccurate information.

• Request for deletion where applicable.

• Objection to or restriction of certain processing activities.

• Withdrawal of consent where processing is based on consent.

• Other rights established by applicable law.

Requests may be submitted through the official contact channels available on KPaja.

We may request reasonable information to verify the identity of the requester before processing a request.

21. Minors

KPaja is intended exclusively for adults.

We do not knowingly collect information from minors for the purpose of allowing them to use the platform.

If we discover that a minor has created an account or is using the platform, we may suspend or delete the account and take appropriate measures.

If you believe that a minor is using KPaja, you may report it through our reporting channels.

22. International Transfers

Some providers used by KPaja may operate servers or provide services from other countries.

As a result, certain information may be processed or stored outside the country where the user resides.

Where applicable, we will take the measures required by applicable law regarding such transfers.

23. Changes to This Policy

We may update this Privacy Policy when necessary due to legal, technical, commercial, or functional changes.

The current version will be available on this page.

Where appropriate, we may notify users of significant changes through the platform, email, or other reasonable means.

24. Contact

If you have questions about this Privacy Policy, wish to exercise a right relating to your personal data, or need to make a privacy-related inquiry, you may contact KPaja through the official channels available on the platform.

By using KPaja, you acknowledge that you have read this Privacy Policy and understand how the information necessary to provide and protect our services may be processed.