Privacy Policy

Last Updated: Dec 2025

KokoQuest (“we,” “us,” “our”) is an AI-powered company discovery platform operated by YSK Capital LLC, located at 5828 W Jefferson Blvd., Fort Wayne, IN 46804. We are committed to protecting your privacy and ensuring that your personal data is handled transparently and responsibly.

This Privacy Policy describes the information we collect, how we use it, how we protect it, and the rights available to you. By using KokoQuest, you agree to the practices described below.

1. Information We Collect

1.1 Account Information

  • Email address
  • Google OAuth user ID
  • Company name and website (if provided)
  • Sender details for outreach (name, role, pitch)
  • Subscription and billing information (via Stripe)

1.2 Gmail Integration (Google OAuth)

If you choose to connect Gmail to send outreach emails, we request the following scopes:

  • https://www.googleapis.com/auth/gmail.send — allows KokoQuest to send email on your behalf
  • https://www.googleapis.com/auth/userinfo.email — allows us to confirm your email identity

We do not request or access Gmail inbox data, messages, threads, or labels. KokoQuest never reads, stores, or analyzes your Gmail inbox.

When connected, we store:

  • Encrypted Gmail refresh token (server-side only)
  • Email subjects and bodies you draft and send through KokoQuest (see Section 1.4)
  • Email delivery metadata (e.g., timestamps)

Refresh tokens are stored only on our server in encrypted form and are never stored in the browser or exposed to client-side JavaScript.

1.3 Platform Usage Information

To provide and improve the service, we store:

  • Search queries
  • Enriched company data generated during searches
  • Relevance scores and activity logs
  • Outbound interactions (emails sent, leads generated)

We do not store IP addresses or use third-party tracking pixels.

1.4 Email Content Storage

By default, KokoQuest stores email subject and body content drafted or sent through the platform to support your workflow and history.

Users may disable this behavior in Settings → Privacy Preferences, after which KokoQuest will not retain future email content.

Stored email content older than 90 days is automatically deleted as part of our data-retention schedule.

1.5 Customer Support Communications

If you reach out via info@kokoquest.com or our Contact page, we retain the messages sent to us for support and quality assurance.

2. How We Use Your Information

We use personal data to:

  • Provide and personalize the KokoQuest platform
  • Send emails you authorize via Gmail
  • Improve search results and enrichment quality
  • Manage subscriptions and billing via Stripe
  • Detect abuse and maintain platform security
  • Respond to support inquiries
  • Comply with legal obligations

We do NOT sell, rent, or trade your personal information.

Supplier/company data discovered during searches may be retained and used to improve the platform, enhance search quality, or be included in aggregated datasets published at our discretion. This data does not include your personal email content or personal account data.

3. Data Sharing

We share information only with the service providers necessary to operate KokoQuest:

  • Google – for authentication and Gmail sending
  • Stripe – for billing and subscription management
  • Vercel – hosting infrastructure
  • Supabase – database and authentication
  • Modal / Serper / LLM providers – search and enrichment infrastructure

Each provider is contractually required to protect your data and use it only to support the KokoQuest service.

We do not share user data with unwarranted third parties.

4. Data Retention

Unless you request deletion, we retain data according to the following schedule:

  • Email subject/body content: Deleted after 90 days
  • Inactive accounts: Deleted after 24 months of no activity
  • Pending account deletions: Permanently removed after a 7-day grace period
  • Supplier dataset content (non-personal): Retained indefinitely
  • Logs: Redacted and minimized in production

5. Your Rights

5.1 European Union Users (GDPR)

If you are located in the EU, you have the right to:

  • Access your data
  • Request correction
  • Export your data
  • Request deletion (“right to be forgotten”)
  • Object to processing
  • Withdraw Gmail or OAuth permissions at any time

You may manage permissions through Google Security Settings or by contacting us.

5.2 Data Export

You can export your full dataset at any time through Settings → Export Data.

5.3 Data Deletion

You may request account deletion through the Settings page or by emailing info@kokoquest.com. Deletion requests initiate a 7-day grace period before permanent removal.

6. Security

We use encryption, server-side token storage, strict access controls, and RLS enforcement to protect your data. Gmail refresh tokens are stored only in encrypted form and never transmitted to or stored on the client.

No method of transmission over the Internet is perfectly secure, but we implement industry-standard measures to safeguard your information.

7. Contact Us

For privacy questions or requests, contact:

YSK Capital LLC

5828 W Jefferson Blvd
Fort Wayne, IN 46804

Email: info@kokoquest.com

Contact Page: https://www.kokoquest.com/contact