Privacy Policy

KMC+LUCAS GROUP Inc. operates KOSMOS8. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use KOSMOS8 websites, mobile applications, and related services (the "Service").

For privacy questions or requests, contact support@kosmos8.ai.

At or before collection, we provide this summary of the categories of personal information we collect, the purposes for collection, and our retention practices. More detail appears below.

Categories collected: identifiers; account, profile, and contact information; user-generated content and documents; messages and communications; event participation data; payment and subscription information; device, log, diagnostics, usage, and analytics data; approximate location from IP or device settings; professional, education, and business information; inferences and recommendations; and sensitive personal information if you provide it or if it is contained in documents or messages you upload.

Purposes: account creation, authentication, platform operation, profile generation, AI-assisted features, matching and recommendations, messaging, document sharing, events, access controls, payments, analytics, security, fraud prevention, support, compliance, and enforcement of terms.

Retention: we retain personal information for as long as reasonably necessary for the purposes described in this Policy, while your account is active, and as required for legal, security, accounting, or dispute purposes. Deleted accounts and associated active-account data are generally deleted or de-identified within approximately 30 days unless retention is required or permitted by law; backup and security copies may persist for a limited period under restricted access.

Sale/share: we do not sell personal information for money. We do not knowingly sell or share personal information of users under 16. If we enable cross-context behavioral advertising or other activity that constitutes "sharing" or "sale" under California law, we will update this Policy and provide required opt-out choices.

AI training: we do not use non-public content, NDA-protected content, confidential documents, pitch materials, or private messages to train general-purpose AI models.

Information you provide

Account and contact information, such as name, email address, username, password/authentication data, company, role, and support messages.

Profile information, such as professional background, skills, interests, location preferences, social or professional links, and preferences you choose to provide.

Uploaded content, such as resumes, portfolios, business plans, pitch decks, documents, images, files, comments, posts, and other user-generated content.

Messages and communications, including direct messages, event communications, document-sharing notes, NDA workflow information, and interactions with support.

Payment and subscription information, such as plan, transaction status, billing contact, and payment tokens or limited payment details provided by payment processors.

Information collected automatically

Device, log, and usage data, such as IP address, device identifiers, browser/app type, operating system, pages or screens viewed, clicks, search terms, event timestamps, referring pages, crash logs, and diagnostics.

Analytics data collected through Google Analytics 4 or similar tools, including product interactions, approximate location from IP address, and performance data.

Cookies, mobile identifiers, local storage, and similar technologies used for authentication, preferences, analytics, fraud prevention, and security.

Information from third parties

Authentication information from Google OAuth or other login providers, such as account identifier and email address.

Information from service providers that support hosting, database, AI processing, analytics, payments, security, email, or support.

Information that other users, event organizers, or business partners provide when they invite you, share documents with you, message you, or interact with your content.

• Provide, operate, maintain, secure, and improve the Service;
• Create and manage accounts, authenticate users, and provide support;
• Generate profiles, summaries, recommendations, and AI-assisted outputs;
• Enable networking, matching, messaging, events, document sharing, access controls, and NDA workflows;
• Process payments, subscriptions, invoices, refunds, and fraud checks;
• Analyze usage, troubleshoot, test, and improve product quality;
• Enforce our Terms, prevent abuse, investigate security incidents, and protect users and the public;
• Comply with legal obligations, respond to lawful requests, establish or defend legal claims, and conduct business transactions; and
• Send administrative notices, product updates, security alerts, and marketing communications where permitted, with available opt-out choices.

User content may be processed by AI providers, such as OpenAI API or Google Vertex AI, to deliver platform functionality, including profile assistance, summarization, matching, recommendations, search, and workflow automation. We use service-provider arrangements and available provider settings intended to restrict use of non-public content for general-purpose model training.

AI and matching features are designed to assist users, not to make legal, investment, employment, credit, housing, insurance, education, or similarly significant decisions. If we introduce automated decision-making that is subject to additional legal requirements, we will update our disclosures and provide any required notices and choices.

KOSMOS8 includes networking and social features. Information you place in a public profile, public post, public comment, event page, group, or shared workspace may be visible to other users or the public depending on the relevant setting. Direct messages and restricted documents are visible to the recipients you select and may be accessed by KOSMOS8 as necessary for service operation, security, abuse prevention, and legal compliance.

Use care when sharing confidential, sensitive, or third-party information. Even where we provide access controls, recipients may copy, screenshot, download, or further disclose information.

We disclose personal information only in the categories described below, and only as necessary for the purposes listed.

We do not sell personal information for money. We do not knowingly sell or share personal information of users under 16. We currently do not intend to use private messages, confidential documents, or NDA-protected materials for cross-context behavioral advertising.

California law defines "share" to include certain disclosures for cross-context behavioral advertising. If KOSMOS8 enables advertising features, remarketing, data brokers, third-party advertising SDKs, Google Signals, or other tracking that qualifies as sale or sharing, we will update this Policy and provide a "Do Not Sell or Share My Personal Information" mechanism as required.

We use Google Analytics 4 and similar tools to understand usage and improve the Service. These tools may collect identifiers, device information, and online activity data. Users may adjust device settings, browser settings, and analytics opt-out tools where available.

We may use cookies, SDKs, mobile identifiers, local storage, and similar technologies for login, preferences, security, analytics, and performance. Some third-party analytics providers may collect information about your online activity over time and across different websites or services.

Some browsers send "Do Not Track" signals. Because there is no uniform industry standard for responding to all Do Not Track signals, we do not respond to them in a standardized way. Where required by law, we honor valid Global Privacy Control or other opt-out preference signals as requests to opt out of sale or sharing for the browser or device that sends the signal.

The mobile app may request device permissions only when needed for features you choose to use, such as file upload, photo or media upload, notifications, camera access, calendar/event features, or authentication. You can manage permissions through your device settings, but disabling permissions may limit some features.

We retain information for the period reasonably necessary to provide the Service, fulfill the purposes described in this Policy, comply with law, resolve disputes, collect fees, enforce agreements, and maintain security. Retention periods vary depending on the type of information, user settings, account status, legal requirements, and technical constraints.

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encryption in transit where appropriate, authentication, logging, monitoring, and vendor review. No system is completely secure, and we cannot guarantee that information will never be accessed, disclosed, altered, or destroyed without authorization.

• Account settings: You may review and update certain account and profile information in the Service.
• Marketing: You may opt out of marketing emails by using the unsubscribe link or contacting us. We may still send transactional or security messages.
• Deletion: You may request account deletion by using in-app tools where available or emailing support@kosmos8.ai.
• Access, correction, deletion, and portability: You may request access to, correction of, deletion of, or a copy of your personal information, subject to legal exceptions.
• Opt out of sale/share and limit sensitive personal information: California residents may have these rights as described below.
• Authorized agents: Where permitted by law, you may use an authorized agent to submit a privacy request. We may require proof of authorization and verification of your identity.

To submit a request, email support@kosmos8.ai with the subject line "Privacy Request" and include the email address associated with your account. We will verify your request using information reasonably related to your account and respond within the time required by applicable law.

This section applies to California residents and is intended to describe our practices for the preceding 12 months and expected future practices. Terms such as "personal information," "sensitive personal information," "sell," and "share" have the meanings given in the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA).

Categories of personal information we may collect about California residents, as defined by the CCPA/CPRA:

California residents may have the following rights, subject to exceptions and verification:

• Right to know/access: request categories and specific pieces of personal information, sources, purposes, and categories of third parties.
• Right to delete: request deletion of personal information we collected from you, subject to exceptions.
• Right to correct: request correction of inaccurate personal information.
• Right to opt out of sale or sharing: request that we not sell or share personal information, including via valid opt-out preference signals such as Global Privacy Control where required.
• Right to limit use/disclosure of sensitive personal information: request limitation where our use is outside permitted purposes.
• Right to non-discrimination: we will not discriminate against you for exercising privacy rights.
• Right to authorized agent: authorize another person or entity to submit a request on your behalf.

Submit California requests by emailing support@kosmos8.ai with the subject line "California Privacy Request." We may ask for information needed to verify your identity or authority. We will respond within 45 days unless an extension is permitted by law.

California "Shine the Light" requests: California Civil Code Section 1798.83 may permit California residents to request information about disclosures of personal information to third parties for their direct marketing purposes. Submit requests to support@kosmos8.ai.

The Service is not directed to children under 13, and users must be at least 13. If you believe a child under 13 has provided personal information to us, contact support@kosmos8.ai so we can take appropriate action.

California minors under 18 who are registered users may request removal of content or information they posted through the Service by deleting it through available tools or emailing support@kosmos8.ai. Removal may not be complete or comprehensive if the content was copied, reposted, stored by others, anonymized, required to be retained by law, or otherwise subject to legal exceptions.

We do not knowingly sell or share personal information of users under 16. We do not knowingly target minors with advertising for age-restricted products or services.

KOSMOS8 is operated from the United States. If you access the Service from outside the United States, you understand that your information may be processed in the United States and other jurisdictions where our service providers operate, which may have different data protection laws than your jurisdiction.

We may update this Privacy Policy from time to time. We will update the "Last Updated" date and provide additional notice when required by law, such as by email, in-app notice, or website notice. Your continued use of the Service after the effective date means the updated Policy applies to your use.

KMC+LUCAS GROUP Inc. Email: support@kosmos8.ai