Privacy Policy
Updated:
This Privacy Policy explains how Kimu Labs SL, trading as MOO Content ("we", "us", or "our"), collects, uses, and protects your personal data when you visit our website (moocontent.com) or use our platform to connect brands with content creators. We are committed to handling your data responsibly and in compliance with the General Data Protection Regulation (GDPR) and applicable Spanish and EU data protection law.
Please read this policy carefully. If you have any questions, contact us at hello@moocontent.com.
1. Who We Are (Data Controller)
Kimu Labs SL (trading as MOO Content) is the data controller responsible for your personal data.
Contact details:
Email: info@kimulabs.io
Phone: +34 628 887 303
Location: Basque Country, Spain
If you have any questions about how we handle your data, or wish to exercise your rights, please contact us at the email above.
2. The Data We Collect
We collect different data depending on whether you are a brand or a creator using our platform.
From brands, we collect:
Name, company name, and job title
Email address and phone number
Campaign briefs, requirements, and uploaded files
Billing information (processed via our payment provider — we do not store card details)
Communications sent via the platform (messages, feedback, approvals)
From creators, we collect:
Name, contact details, and profile information
Niche, style, content samples, and past brand experience
Pricing and availability information
Payment and bank details (for remuneration)
Content files and video submissions
Communications sent via the platform
From all visitors, we collect:
IP address and browser/device information
Pages visited, time on site, and navigation patterns (via analytics)
Data submitted through forms (demo requests, contact messages, newsletter sign-ups)
Cookie data (see Section 8)
3. How We Use Your Data
We use your personal data only for the purposes described below, and only where we have a valid legal basis to do so under GDPR.
To operate the platform:
Matching brands with appropriate creators — Legal basis: Contract performance
Facilitating briefing, messaging, feedback, and content delivery — Legal basis: Contract performance
Processing payments between brands and creators — Legal basis: Contract performance
Providing access to AI-powered features (creator matching, script generation, pricing benchmarks) — Legal basis: Contract performance / Legitimate interest
To communicate with you:
Responding to demo requests, contact messages, or support enquiries — Legal basis: Legitimate interest / Consent
Sending platform updates, feature announcements, or marketing emails (where you have opted in) — Legal basis: Consent
To improve our service:
Analysing usage patterns to improve platform functionality — Legal basis: Legitimate interest
Using aggregated, anonymised analytics to understand how our platform is used — Legal basis: Legitimate interest
4. AI-Powered Features and Automated Processing
Kimu Labs SL uses artificial intelligence — powered by Anthropic's Claude API — to power several features on our platform, including creator matching, AI script and hook generation, pricing benchmarks, and video enhancement (automatic sound quality improvement, silence removal, and subtitle generation).
These AI features process data you provide — such as your campaign brief, creator profile, or uploaded content — to generate relevant outputs. No fully automated decision-making with legal or similarly significant effects takes place without human involvement. Creator matching suggestions are recommendations, not automated determinations, and brands retain full control over who they choose to work with.
You have the right to request human review of any AI-assisted process that affects you. Contact us at info@kimulabs.io to do so.
5. Who We Share Your Data With
We do not sell your personal data. We may share it with the following categories of third parties, solely to operate and improve the platform:
Stripe (payment processor): to securely handle transactions between brands and creators. Stripe processes payment data on our behalf under its own privacy policy and PCI-DSS compliance.
Google Analytics (analytics): to understand how visitors use our website and platform. Google Analytics uses cookies and may transfer data to the USA under Standard Contractual Clauses.
Anthropic (AI provider): to power our AI features including creator matching, script generation, and pricing benchmarks. Data submitted to these features may be processed by Anthropic's Claude API.
Cal.com (scheduling): to manage demo bookings and meetings. Cal.com processes contact details submitted when booking a call.
Framer (website infrastructure): our website is hosted on Framer, which processes technical and usage data as part of serving the site.
All third-party providers are contractually required to process your data only as instructed and in compliance with GDPR. Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).
6. How Long We Keep Your Data
We retain your personal data only for as long as necessary for the purposes it was collected, or as required by law. Our general retention periods are:
Account and profile data: retained for the duration of your active relationship with us, plus up to 2 years after account closure
Campaign and transaction records: retained for up to 7 years to meet legal and financial obligations
Marketing emails and consent records: retained until you unsubscribe, then for a further 2 years as proof of consent
Website analytics data: retained in aggregated form for up to 26 months
Support and contact messages: retained for up to 2 years after your last communication
When data is no longer needed, it is securely deleted or anonymised.
7. Your Rights Under GDPR
As a resident of the EU or EEA, you have the following rights regarding your personal data:
Right of access: You can request a copy of the personal data we hold about you
Right to rectification: You can ask us to correct any inaccurate or incomplete data
Right to erasure: You can request that we delete your data, subject to certain legal exceptions
Right to restrict processing: You can ask us to limit how we use your data in certain circumstances
Right to data portability: You can request your data in a structured, machine-readable format
Right to object: You can object to processing based on legitimate interests or for direct marketing purposes
Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at hello@moocontent.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.
8. Cookies
Our website uses cookies — small text files stored on your device — to make the site work properly and to help us understand how it is used.
We use the following types of cookies:
Strictly necessary cookies: Required for the website to function (e.g. session management). These cannot be disabled.
Analytics cookies: Help us understand how visitors interact with the site (e.g. pages visited, time on site). These are only set with your consent.
Functionality cookies: Remember your preferences and settings. Set with your consent.
Our website is built on Framer, which may set its own cookies as part of the platform. We also use Google Analytics, which sets cookies to measure site usage and may transfer data to the USA under Standard Contractual Clauses.
When you first visit our website, a cookie banner will ask for your consent to non-essential cookies. You can change your preferences at any time via the cookie settings link in our footer. You can also control cookies through your browser settings, though disabling certain cookies may affect how the website functions.
9. Data Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration, or disclosure. These measures include encrypted data transmission (HTTPS), access controls, and secure hosting infrastructure.
While we take all reasonable steps to protect your data, no online system is completely secure. If you suspect any unauthorised access to your account or data, please contact us immediately at hello@moocontent.com.
In the event of a personal data breach that is likely to affect your rights and freedoms, we will notify you and the relevant supervisory authority as required by GDPR.
10. International Data Transfers
Some of our third-party service providers are based outside the European Economic Area (EEA). Specifically, Anthropic (USA), Google Analytics (USA), Stripe (USA), and Cal.com (USA) may process your data in the United States. In each case, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or transfers to countries covered by an EU adequacy decision.
11. Children's Privacy
Our platform is intended for use by businesses and adult content creators. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us at info@kimulabs.io and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make significant changes, we will update the 'Last updated' date at the top of this document and, where appropriate, notify you by email or via the platform.
We encourage you to review this policy periodically to stay informed about how we protect your data.