LEGAL

Privacy Policy

How KOMA BUSINESS collects, uses and protects information across our website, platform and membership ecosystem.

Last updated:

Your privacy matters.

This Privacy Policy explains how KOMA BUSINESS collects, uses, stores and shares information when you visit insidekoma.com, create or use an account at inside.koma.business, purchase a membership, communicate with us, or otherwise use the KOMA BUSINESS ecosystem.

By using our services, you acknowledge the practices described in this Privacy Policy.

1. WHO WE ARE

KOMA BUSINESS is a business education, intelligence and membership ecosystem operated by:

Legal entity: KOMA BUSINESS

Contact:
management@koma.business

For the purposes of applicable data protection law, the entity listed above is the controller of personal data processed through KOMA BUSINESS unless otherwise stated.

2. SERVICES COVERED BY THIS POLICY

This Privacy Policy applies to:

  • insidekoma.com
  • inside.koma.business

and the related KOMA BUSINESS membership, resources, business insights, community features, communications, checkout flows and other services operated through these domains.

Third-party websites and services linked from KOMA BUSINESS may have their own privacy practices and policies.

3. INFORMATION WE COLLECT

The information we collect depends on how you interact with KOMA BUSINESS.

Account information

When you create an account, we may collect information such as:

  • name
  • email address
  • account identifiers
  • authentication information
  • profile information you choose to provide
  • membership and access level

If you choose to sign in using a third-party authentication provider such as Google, we may receive basic account information made available by that provider according to the permissions you approve.

Payment and subscription information

When you purchase or manage a membership, we may process:

  • membership plan
  • subscription status
  • billing status
  • transaction identifiers
  • payment dates
  • checkout and subscription history

Payment card information is processed by our payment provider, Stripe. KOMA BUSINESS does not need to store your full payment card number.

Usage and technical information

When you use our websites or platform, we may automatically receive technical information including:

  • IP address
  • browser and device information
  • operating system
  • pages viewed
  • dates and times of activity
  • referring pages
  • security and authentication logs
  • platform interactions
  • resource views
  • general usage information

Communications

If you contact us, participate in community features, send messages, submit information, or communicate with our team, we may process the information contained in those communications.

Community and user-generated content

When you use chats, groups, community areas or similar platform features, we process the content you choose to submit and information necessary to display and operate those features.

Marketing and attribution information

Where applicable, we may process information used to understand how visitors discover KOMA BUSINESS, including:

  • UTM campaign parameters
  • referral identifiers
  • referring URLs
  • source URLs
  • campaign, ad set, ad and placement identifiers
  • Meta identifiers such as _fbp and _fbc where permitted and enabled

This information may be associated with subsequent registrations or purchases so that we can understand the effectiveness of our marketing.

4. HOW WE USE INFORMATION

We may use personal data to:

  • create and manage accounts
  • authenticate users
  • provide memberships and platform access
  • process subscriptions and payments
  • deliver resources, Business Email Insights and other membership content
  • operate chats and community features
  • send transactional and service-related communications
  • provide customer support
  • manage membership upgrades, cancellations and access
  • protect accounts and prevent abuse, fraud or unauthorized access
  • maintain and improve our websites and platform
  • understand how our services are used
  • measure marketing and campaign performance
  • perform analytics where permitted
  • send marketing communications where permitted
  • comply with accounting, tax, legal and regulatory obligations
  • establish, exercise or defend legal claims

6. PAYMENTS

Payments and subscriptions are processed using Stripe.

Stripe may collect payment details, billing information and other information necessary to process transactions, prevent fraud and comply with financial regulations.

KOMA BUSINESS receives information about the status of your transaction and subscription but does not need to receive or store your complete payment card credentials.

Stripe processes personal data under its own privacy documentation and contractual obligations.

7. ANALYTICS

We may use analytics services such as Google Analytics 4 to understand how visitors use KOMA BUSINESS.

Depending on your location and consent choices, analytics may process information such as:

  • pages visited
  • session activity
  • general device information
  • browser information
  • referral source
  • campaign information
  • approximate location derived from network information
  • interaction events

Where consent is legally required for analytics technologies, analytics will only be activated after the appropriate consent has been provided.

Analytics may operate on both insidekoma.com and inside.koma.business. Where you have made an Analytics choice on insidekoma.com, that choice may be carried over to inside.koma.business when you continue there, so you do not need to make the same choice again. You can later change it through the Analytics or cookie preferences available on the relevant service.

Separately from these analytics services, we count page visits and clicks on our membership buttons without cookies. These counts contain only the page address (without any query string), the plan a button refers to and, where present, campaign labels from the link you followed (for example utm_source). We do not store your IP address, browser details or any identifier with them, and nothing is saved on your device. To stop abuse, our server keeps a one-way hash of your IP address in a separate rate-limit record for about a day; it is never stored with the counts. We use these counts only to see how many visits lead to a membership.

8. ADVERTISING AND META TECHNOLOGIES

KOMA BUSINESS may use Meta business tools, including Meta Pixel and server-side Conversions API, to measure advertising performance and understand whether advertising leads to actions such as registrations, trials or purchases.

Depending on the implementation and your consent choices, information used for advertising measurement may include:

  • page and event information
  • campaign attribution data
  • browser identifiers
  • _fbp and _fbc identifiers
  • transaction or subscription events
  • technical information used for event matching

Where consent is legally required for advertising or tracking technologies, these technologies will be used according to your consent choice.

We do not provide payment card numbers or account passwords to Meta for advertising purposes.

9. COOKIES AND SIMILAR TECHNOLOGIES

KOMA BUSINESS uses cookies and similar technologies for different purposes.

Essential technologies

These are required for functions such as:

  • security
  • authentication
  • maintaining sessions
  • remembering privacy and cookie preferences
  • operating essential website functionality

Essential technologies may operate without optional consent where permitted by law.

Analytics technologies

Analytics technologies help us understand how visitors use our services and how the website performs.

Where required by law, they are disabled until you provide consent.

These technologies may also be used on inside.koma.business. An Analytics choice you make on insidekoma.com may be carried over to inside.koma.business, where it can be changed through the preferences available on that service.

Marketing technologies

Marketing technologies may help us measure advertising campaigns, attribute registrations or purchases, and improve advertising performance.

Where required by law, they are disabled until you provide consent.

Cookie preferences

When our cookie consent interface is available, you can choose between the categories presented to you.

You may change or withdraw your consent through the cookie preferences controls made available on the website.

Rejecting non-essential cookies will not prevent you from accessing the core KOMA BUSINESS website or membership services.

10. SERVICE PROVIDERS

We use trusted service providers to operate different parts of KOMA BUSINESS.

These may include:

Supabase
Authentication, database, storage and platform infrastructure.
Stripe
Payment processing, subscriptions and billing.
Vercel
Hosting and delivery of the KOMA BUSINESS application.
Hostinger
Hosting and delivery of the public KOMA BUSINESS website.
Resend
Delivery of transactional, membership and other email communications.
Google
Optional authentication services and analytics services such as Google Analytics 4.
Meta
Advertising measurement and marketing technologies such as Meta Pixel and Conversions API.

These providers process information according to their respective roles, contractual arrangements and privacy obligations.

We may also disclose information to professional advisers, authorities or other parties where required by law or reasonably necessary to protect our rights, users or services.

11. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process information in countries outside your country of residence, including outside the European Economic Area.

Where required by applicable law, international transfers are handled using recognized legal safeguards, which may include:

  • adequacy decisions
  • Standard Contractual Clauses
  • other legally recognized transfer mechanisms

Additional technical or organizational safeguards may also be used where appropriate.

12. HOW LONG WE KEEP INFORMATION

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention depends on the type of information and why it is processed.

For example:

  • account information may be retained while your account remains active and for a reasonable period after closure
  • subscription and transaction records may be retained for periods required by tax, accounting and legal requirements
  • support and communication records may be retained while necessary to resolve requests and maintain relevant business records
  • security and technical logs may be retained for periods reasonably necessary for security, troubleshooting and fraud prevention
  • marketing consent records may be retained where necessary to demonstrate your preferences and our compliance obligations

We may retain information for longer where required by law, where a dispute exists, or where necessary to establish, exercise or defend legal claims.

Where information is no longer required, it may be deleted, anonymized or securely isolated according to our systems and legal obligations.

13. EMAIL COMMUNICATIONS

KOMA BUSINESS sends service-related communications necessary to operate your account and membership.

These may include:

  • account messages
  • security notifications
  • subscription information
  • payment confirmations
  • membership access information
  • important service updates

Depending on your membership and preferences, we may also send Business Email Insights, resources, product updates or marketing communications.

Where applicable, you may unsubscribe from marketing communications using the unsubscribe mechanism provided in the email or by contacting us.

Certain transactional or service communications cannot be opted out of while they remain necessary to provide your account or membership.

14. SECURITY

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration or loss.

No internet service or storage system can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your login credentials and should contact us if you believe your account has been compromised.

15. YOUR PRIVACY RIGHTS

Depending on where you live and the laws that apply to you, you may have rights regarding your personal data.

These may include the right to:

  • request access to your personal data
  • request correction of inaccurate information
  • request deletion of personal data
  • request restriction of processing
  • object to certain processing
  • receive certain information in a portable format
  • withdraw consent at any time where processing is based on consent
  • object to certain direct marketing
  • lodge a complaint with a competent data protection authority

Some rights are subject to legal conditions and exceptions.

To make a privacy request, contact:

management@koma.business

We may need to verify your identity before processing certain requests.

16. EUROPEAN PRIVACY RIGHTS

If the GDPR applies to your personal data, you may exercise the rights provided under applicable European data protection law.

You also have the right to lodge a complaint with the competent supervisory authority in your country of residence, place of work, or the location of an alleged infringement.

If you are in Poland, information about the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), is available through the authority's official website.

17. AUTOMATED DECISION-MAKING

KOMA BUSINESS does not currently use personal data to make solely automated decisions that produce legal effects or similarly significant effects on users.

If this changes, we will provide the information required by applicable law.

19. CHANGES TO THIS POLICY

We may update this Privacy Policy when our services, technologies or legal obligations change.

When we make changes, the updated version will be published on this page and the "Last updated" date will be revised.

Where required, we may provide additional notice of material changes.

20. CONTACT

Questions about this Privacy Policy or the use of your personal data can be sent to:

KOMA BUSINESS
management@koma.business

Legal entity:
KOMA BUSINESS