Privacy Policy

1. Information We Collect

   We collect personal and technical information from users in the following ways:

   1. Information You Provide Directly:

      • Name, email address, and contact details.
      • Account credentials and profile preferences.
      • Payment and billing data (processed via trusted third-party providers like Stripe).
      • User-generated content, such as messages, responses, and uploads.
      • Support requests and feedback.

   2. Information Collected Automatically:

      • IP address and device identifiers.
      • Browser type, operating system, and time zone.
      • Site interaction and usage data.
      • Cookies, session IDs, and tracking pixels.

   3. Information from Third Parties:

      • Identity, banking, and tax-form information collected by Stripe, Inc. during Connect onboarding for Skilled Individuals.
      • Card payment metadata (last four digits, brand, country) returned by Stripe after a Client's checkout.
      • Marketing and referral tracking data, when you reach the Platform via a partner link.

   ---

2. How We Use Your Information

   Your data may be used to:

   • Operate, personalize, and improve the Platform.
   • Authenticate and manage user accounts.
   • Facilitate secure payments and process transactions.
   • Enable user-to-user interactions and content delivery.
   • Send transactional communications (e.g., confirmations, support).
   • Prevent fraud, abuse, or security breaches.
   • Comply with legal obligations and enforce policies.

   ---

3. Disclosure of Information

   We share your personal information with the following categories of recipients:

   • Stripe, Inc. — for payment processing, payouts, KYC verification of Skilled Individuals, tax-form collection (W-9 / W-8), and 1099-K reporting. Stripe handles your card details, identity documents, and bank account directly; Cloook does not store this data on its own servers. Stripe's use of your data is governed by Stripe's Privacy Policy.
   • Resend, Inc. — for delivery of transactional emails (verification links, booking confirmations, dispute and incident notifications, payout receipts). Resend processes your email address and the email content on our behalf.
   • DigitalOcean, LLC — for cloud hosting (Kubernetes), database, and object storage (DigitalOcean Spaces). Profile media, evidence attachments, and message attachments are stored on DigitalOcean Spaces. All data in transit is encrypted with TLS.
   • Legal or regulatory authorities, when required by law or to protect rights.
   • Other Platform users, only to the extent needed to fulfill the service — e.g. names and avatars of the counterparty in a session you book or accept.
   • Business acquirers, in the event of a merger, acquisition, or transfer of assets.

   We do not sell your personal data.

   ---

4. Cookies & Tracking Technologies

   We use cookies and similar technologies to:

   • Maintain authenticated sessions (e.g. keeping you signed in across pages).
   • Remember user preferences such as theme or language.
   • Detect and prevent abuse, fraud, and unauthorized access (security cookies set by Cloook or Stripe).

   You can manage cookies through your browser settings — disabling them may affect sign-in and other security-sensitive features. Cloook does not currently use third-party advertising or behavioral tracking cookies.

   ---

5. User Rights

   We respect your privacy rights and provide access as required by law:

   1. Under GDPR (EU/UK residents):

      You may:

      • Request access to or correction of your personal data.
      • Ask us to delete or restrict processing.
      • Object to data processing or request data portability.
      • Withdraw consent at any time (where processing is based on consent).
      • File a complaint with your local Data Protection Authority.

   2. Under CCPA/CPRA (California residents):

      You may:

      • Request disclosure of categories and sources of data collected.
      • Request deletion of personal information.
      • Opt out of sale or sharing (we do not sell personal data).
      • Designate an authorized agent to make a request on your behalf.

   To exercise these rights, contact us at [email protected]

   ---

6. Data Retention

   We retain your personal data only as long as necessary to fulfill the purposes described above.

   Specific retention periods may apply for:

   • User account data: Retained while the account is active, and up to 30 days after deletion.
   • Financial records: Retained for up to 7 years in compliance with tax and audit obligations.
   • Support communications: Retained for up to 24 months

   Data may be anonymized for analytics purposes beyond these periods.

   ---

7. Security

   We implement technical and organizational measures to protect your data, including:

   • TLS encryption for all data in transit.
   • Encrypted storage of sensitive fields (e.g., passwords hashed using bcrypt).
   • Access controls and audit logging.
   • Regular security assessments and incident response planning.

   Despite our efforts, no system can be guaranteed 100% secure. Use of the Platform is at your own risk.

   ---

8. Children's Privacy

   Cloook is open to users 13 and older. In the United States, the Children's Online Privacy Protection Act (COPPA) requires verifiable parental consent before collecting personal information from a child under 13. Where the law permits a younger user with parental consent, the parent or legal guardian must complete the registration on the child's behalf and supervise the account; the parent is the data subject for purposes of consent and access requests.

   We do not knowingly collect personal information directly from a child under 13 without verified parental consent. If you believe a child has submitted data without that consent, please contact us at the email below and we will delete it promptly.

   ---

9. International Transfers

   Your data may be stored and processed in the United States or other countries with differing data protection laws. Where applicable, we rely on standard contractual clauses or other lawful mechanisms to ensure adequate protection for international transfers.

   ---

10. Automated Processing & AI Disclosure

    We may use automated tools, including AI models, to analyze or generate content (e.g., responses or summaries). These tools do not make legal or financial decisions on your behalf. You may request human review where applicable.

    ---

11. Policy Updates

    We may update this Privacy Policy to reflect legal, technical, or business changes. Updates will be posted on this page with a revised "Last Updated" date. Continued use of the Platform constitutes acceptance of the updated terms.

    ---

12. If you have questions or concerns about this Privacy Policy or your personal data, contact:Cloook, LLC190 Westward Dr, Suite D Miami Springs, FL 33166
    Email:[email protected]