This policy explains what personal data Koond.eu collects, why, who can see it, and the rights you have over it. It applies to everyone who visits or uses the site.
Koond.eu is built and run by the Koond.eu team. For any question about this policy or your personal data, email us at privacy@koond.eu.
Technical data: our hosting providers keep standard request logs (such as IP address and timestamp) for security. We use Vercel Web Analytics for anonymous, aggregated visit statistics — it uses no cookies, does not keep your IP address, and cannot identify you. If you accept analytics cookies from the banner shown on your first visit, we also use Google Analytics, which sets cookies and processes your IP address and device/browser information to measure how visitors use the site; it only runs after you accept, and you can withdraw your consent at any time via “Cookie preferences” in the footer. Koond.eu never asks you to upload files of any kind, so we hold no bank statements or ID documents.
We process your account and claim data because it is necessary to give you the service you asked for — your account, joining a claim, and your dashboard (Article 6(1)(b) GDPR). We process security logs and compute the public aggregate figures (like “320 investors, €450,000 total loss”) on the basis of our legitimate interest in keeping the platform secure and in helping claims attract legal representation (Article 6(1)(f) GDPR). Aggregate figures never identify you. We do not use your data for advertising, do not build profiles, and do not make automated decisions about you.
Koond.eu is built hub-and-spoke: your participation in a claim is private, and only aggregate numbers are public. Anonymous visitors and other registered users see only a claim’s title, description, status, and aggregate stats — never your name, email, amount, or transaction reference. The Claim Admin assigned to a claim you joined can see your full name, email, investment amount, investment date, and transaction reference — but only for that one claim, and only to prepare the participant roster for the law firm handling it. The Koond.eu team has the same visibility as a Claim Admin, across all claims, to run the platform and review claim proposals. This separation is enforced in the database itself (using Postgres Row-Level Security), not just by what the interface shows — so a compromised or misused client still cannot read another user’s private data.
We use a small number of service providers to run Koond.eu: Supabase (database, authentication, hosting), Vercel (application hosting), and Resend (the emails we send for sign-up confirmation and password resets). When you join a claim, the assigned Claim Admin exports your data as part of the full roster to hand to the law firm coordinating that claim. This is a disclosed, deliberate part of how the service works — not sharing for marketing. We do not sell your personal data and we do not share it with advertisers.
Our database and login system are hosted in the European Union (Supabase, Ireland). Our application hosting (Vercel) and our email provider (Resend) may process limited data — such as server request logs and the emails we send you — on servers outside the European Economic Area. Where that happens, the transfer is covered by the European Commission’s Standard Contractual Clauses.
We keep your account data for as long as your account exists. We keep claim participation data for as long as the claim is active and for a reasonable period afterwards, to support the legal process the claim was created for. We do not yet have an automated retention schedule — deletion happens on request today (see “Your rights”).
Under the GDPR you have the right to access, correct, delete, restrict, or receive a copy of your personal data, and to object to certain processing. To exercise any of these rights, email privacy@koond.eu — some requests are still handled by hand while we build self-service tools. You also have the right to complain to your local EU data protection supervisory authority.
We use strictly necessary cookies by default — for keeping you signed in and remembering your language. With your consent, given via the cookie banner shown on your first visit, we also use Google Analytics cookies to understand how visitors use the site (Vercel Web Analytics uses no cookies either way). You can change your choice at any time via “Cookie preferences” in the footer. We also record a few anonymous product-usage events — for example, that an account was created or a claim was joined — which carry no personal data, just a count.
Access to your data is controlled at the database level, not only by the interface, so that even a compromised client cannot read another user’s private data. We store no uploaded files, which removes an entire category of breach risk. No system is completely secure — please use a strong, unique password, and email privacy@koond.eu immediately if you suspect someone has accessed your account.
Koond.eu is meant for adult retail investors and is not directed at anyone under 18.
We may update this policy as the service evolves. We will change the “last updated” date above, and where a change is material we will highlight it on the site.
Questions, requests, or complaints about this policy or your data: privacy@koond.eu.