← Back to home

Privacy Policy

Last updated: 2026-05-05

1. Introduction

Kouna ("we," "us," "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and share your personal data when you use the Kouna platform ("Platform") at kouna.app.

This Privacy Policy applies to all users: Members (founders, professionals, team members) and Accelerators. By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

We comply with the General Data Protection Regulation (GDPR) and Slovak data protection laws.

2. Data Controller

3. What Personal Data We Collect

3.1. Account and Authentication Data

3.2. Profile Data (Members)

3.3. Company and Opening Data

3.4. Accelerator Data

3.5. Communication Data

3.6. Invitation Data

3.7. Technical and Usage Data

4. How We Use Your Personal Data

4.1. To Provide the Platform Services (Contractual Necessity — GDPR Art. 6(1)(b))

4.2. With Your Consent (GDPR Art. 6(1)(a))

4.3. For Legitimate Interests (GDPR Art. 6(1)(f))

4.4. To Comply with Legal Obligations (GDPR Art. 6(1)(c))

Respond to lawful requests from authorities, comply with court orders, enforce our Terms of Service.

5. Who We Share Your Data With

We do NOT sell your personal data. We share your data only with:

5.1. Other Platform Users

5.2. Service Providers (Data Processors)

We use trusted third-party service providers to operate the Platform. All processors are bound by Data Processing Agreements and GDPR compliance obligations:

All data processing occurs within the European Economic Area (EEA). No data is transferred outside the EEA.

5.2A. AI Processing Provider

When you use the Finish Profile AI assistant feature:

Third-Party Processor: Mistral AI (France, EU)

Data Processing:

Mistral AI Data Handling: We do not have information on Mistral AI's data retention practices. By using this feature, you acknowledge your document text will be processed by Mistral AI.

This feature is optional. You can complete your profile manually.

Legal Basis: Contractual necessity (GDPR Art. 6(1)(b)).

5.3. Legal Obligations

We may disclose your data if required by law, court order, or to protect the rights and safety of Kouna, our users, or the public.

6. How Long We Keep Your Data

6.1. Active Accounts

We retain your data for as long as your account is active and as necessary to provide the Platform services.

6.2. After Account Deletion

When you delete your account:

6.3. Specific Data Categories

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

7.1. Right of Access (Art. 15)

Request a copy of all personal data we hold about you. We will provide this in JSON format within 30 days.

7.2. Right to Rectification (Art. 16)

Correct inaccurate or incomplete data via your profile settings or by contacting gdpr@kouna.app.

7.3. Right to Erasure (Art. 17)

Delete your account via Settings → Delete Account. See Section 6 for data retention after deletion. You may also request erasure by contacting gdpr@kouna.app.

7.4. Right to Restriction of Processing (Art. 18)

Request temporary suspension of data processing under specific circumstances (e.g., while we verify data accuracy or assess legitimate grounds). Contact gdpr@kouna.app.

7.5. Right to Data Portability (Art. 20)

Receive your data in structured, machine-readable JSON format including profile, companies, openings, and contact message metadata. Available in your account settings or by request to gdpr@kouna.app.

7.6. Right to Object (Art. 21)

Object to processing based on legitimate interest (e.g., analytics, matching algorithm, security monitoring). We will stop processing unless we demonstrate compelling legitimate grounds. Contact gdpr@kouna.app.

7.7. Right to Withdraw Consent

Withdraw consent at any time for newsletter subscription (unsubscribe link or profile settings), profile visibility (profile settings), analytics tracking (profile settings toggle), accelerator recommendations (delete startup profile), or AI profile assistance (by choosing not to use the feature).

7.8. Right to Lodge a Complaint

File a complaint with the Slovak Data Protection Authority (Úrad na ochranu osobných údajov SR) at www.dataprotection.gov.sk or via email to statny.dozor@pdp.gov.sk.

To exercise your rights, contact: gdpr@kouna.app. We will respond within 30 days.

8. Data Security

We implement industry-standard security measures to protect your data:

9. Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms:

10. Cookies and Tracking Technologies

10.1. Essential Cookies

We use essential cookies required for Platform operation:

10.2. Analytics Cookies

PostHog (EU region) analytics cookies track:

Legal Basis: Legitimate interest (platform improvement). You can opt out by toggling analytics in your profile settings or by enabling "Do Not Track" in your browser.

10.3. Third-Party Cookies

If you sign in via Google OAuth, Google may set its own cookies per their privacy policy. We do not control third-party cookies.

11. International Data Transfers

All personal data is processed and stored within the European Economic Area (EEA):

No data is transferred outside the EEA. If this changes, we will implement Standard Contractual Clauses (SCCs) or rely on adequacy decisions to ensure GDPR-compliant transfers.

12. Children's Privacy

The Platform is not intended for individuals under 16 years of age. We do not knowingly collect data from children under 16.

During registration, users must confirm they are at least 16 years old via checkbox. We do not collect or store date of birth information. If we discover that a user under 16 has created an account, we will delete the account and associated data immediately.

If you believe a child under 16 has created an account, contact gdpr@kouna.app immediately.

13. Automated Decision-Making and Profiling

13.1. Recommendation Engine

We use automated matching algorithms to:

These algorithms do not produce legal effects or have a significant effect on you. They are recommendations only — you control all decisions about whom to contact or which programs to apply to.

13.2. No Profiling for Marketing

We do not use profiling for targeted advertising or automated decision-making that produces legal or similarly significant effects.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

Material changes will be communicated via:

Changes will take effect 30 days after notification. Continued use of the Platform after this period constitutes acceptance of the updated Privacy Policy.

The effective date at the top of this document shows when the policy was last updated.

15. Contact Us

For questions about this Privacy Policy, to exercise your GDPR rights, or to report privacy concerns:

Supervisory Authority: If you are not satisfied with our response, you may lodge a complaint with: