Legal notice and privacy

1. Data controller

Kowo, publisher of the Site, is the controller for the processing described in this policy. For any question or request about your data: hello@kowo.work.

2. Data we collect

The Site only collects the data strictly needed for it to work:

• Waitlist form: email address, phone number (optional), city or cities of interest, presence frequency, expected duration, monthly budget, free-text message (optional) and the page the form was sent from. For owners: the property’s city, the intended nightly rate and the number of days offered.
• City vote: the chosen city and a pseudonymised technical fingerprint, derived from your IP address and browser without storing the IP address itself, used solely to limit duplicate votes.
• Audience measurement: aggregated, anonymous browsing statistics collected without cookies (see section 4).

No sensitive data is collected, and no advertising profile is built.

3. Purposes and legal bases

Your data is used to:

• Contact you again about the waitlist and the launch of the service in your city: pre-contractual steps taken at your request (article 6.1.b GDPR).
• Measure demand city by city through votes: Kowo’s legitimate interest in sizing its offer (article 6.1.f GDPR).
• Understand how the Site is used: legitimate interest, within the consent-exemption conditions defined by the CNIL, the French data protection authority (see section 4).

Your data is never sold, rented out or shared with advertisers.

4. Cookieless audience measurement

The Site’s audience measurement relies on PostHog, hosted in the European Union and configured without cookies: no cookie or tracker is placed on your device, no persistent identifier is created, and the resulting statistics are aggregated and anonymous.

This setup falls under the consent exemption defined by the CNIL for audience measurement that is strictly necessary to operate the service, produces anonymous results and is not cross-referenced with other processing. This is why the Site shows no cookie consent banner: it sets no tracker that would require one.

5. Recipients and processors

Your data is only accessible to Kowo and to the technical providers strictly required to run the Site:

• Neon (database hosted in the European Union, AWS region eu-central-1, Frankfurt): storage of waitlist requests and city votes.
• Vercel Inc. (United States): hosting and delivery of the Site.
• PostHog (EU hosting): cookieless audience measurement.
• Resend: delivery of future transactional emails (confirmation, follow-up); this provider will be activated when the first emails are sent.

Where a provider is located outside the European Union, the transfer is covered by the safeguards provided for by the GDPR, in particular the European Commission’s standard contractual clauses.

6. Retention periods

• Waitlist requests: 3 years from your sign-up or your last exchange with Kowo, then deletion.
• City votes: for the duration of the waitlist phase, while demand is being measured, then aggregation or deletion.
• Audience statistics: aggregated and anonymous from the moment of collection, they are not personal data.

7. Your rights

Under the GDPR and the French Data Protection Act, you have the right to access, rectify and erase your data, and the right to object to, restrict and port its processing. You may also set instructions for what happens to your data after your death.

To exercise these rights, write to hello@kowo.work. We will reply within one month. If you believe your rights are not being respected, you can lodge a complaint with the CNIL (cnil.fr).

8. Changes to this policy

This policy may evolve with the Site, in particular when the matching service opens. The last-updated date appears at the top of this page; in case of a substantial change, a visible notice will be published on the Site.