Privacy Policy
Effective Date: June 1, 2025
Last Updated: May 20, 2025
Table of Contents
This document explains how we collect, use, and protect your personal information.
At Koopel, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketplace platform operated by MOWA LABS LLC, a Florida Limited Liability Company.
MOWA LABS LLC
1317 Edgewater Dr #307, Orlando, FL 32804
By accessing or using Koopel, you consent to the data practices described in this Privacy Policy.
1Information We Collect
We collect several types of information from and about users of our Platform to provide you with a secure, efficient, and personalized experience:
Account & Profile Information
- Name and contact details (email, phone)
- Username and password
- Profile pictures and biography
- User preferences and settings
- Ratings, reviews, and feedback history
- Communication preferences
Transaction Information
- Purchase and sales history
- Payment method information
- Billing and shipping addresses
- Item details and pricing
- Shipping and delivery information
- Messages between buyers and sellers
Technical & Usage Data
- IP address and device identifiers
- Browser and operating system details
- Clickstream data and browsing patterns
- Time spent on pages and features used
- Search queries and filter preferences
- Crash reports and performance data
Location & Verification Information
- General location (city, state, country)
- Shipping and billing addresses
- Seller verification status
- Identity verification records (processed by Stripe)
- Fraud detection signals
Important Note on Sensitive Verification Data:
When sellers undergo identity verification, all sensitive verification documentation and data (such as ID scans, Social Security Numbers, and other government identifiers) are handled directly by our trusted payment processor, Stripe. Koopel does not receive, store, or have direct access to this sensitive personal information.
2How We Use Your Information
We use the information we collect for various purposes to provide, improve, and personalize the Koopel marketplace experience:
Core Platform Functionality
- Creating and managing your user account
- Processing transactions between buyers and sellers
- Facilitating secure payments and disbursements
- Enabling messaging between users
- Managing listings and inventory
- Coordinating shipping and delivery
- Providing customer support and dispute resolution
Safety & Security
- Verifying user identities (through our partner Stripe)
- Detecting and preventing fraudulent activities
- Monitoring for suspicious transactions
- Protecting against unauthorized access
- Enforcing our Terms of Service
- Addressing harmful or illegal content
- Resolving disputes between users
Personalization & Improvement
- Customizing content based on preferences
- Recommending relevant items
- Remembering your settings and choices
- Analyzing usage patterns to improve features
- Testing new functionality
- Conducting research to enhance the platform
- Developing new services and features
Communication & Marketing
- Sending transaction-related notifications
- Providing important account updates
- Sharing relevant promotional content
- Alerting you to items you might like
- Requesting feedback on your experience
- Inviting you to participate in surveys
- Responding to your inquiries
Legal Basis for Processing (for EEA/UK Users):
If you are located in the European Economic Area or United Kingdom, our legal basis for collecting and using your personal information depends on the specific information and the context in which we collect it:
- Contractual Necessity: To perform our contract with you (e.g., processing transactions, facilitating payments)
- Legitimate Interests: For our legitimate business interests (e.g., fraud prevention, improving our services)
- Legal Obligation: To comply with legal requirements (e.g., tax reporting, responding to legal requests)
- Consent: With your consent, which you can withdraw at any time
Marketing Communications:
You can opt out of marketing communications at any time by using the unsubscribe link in any marketing email we send or by contacting us directly. Note that even if you opt out of marketing communications, you will still receive transactional and account-related messages necessary for the operation of your Koopel account.
4Data Security
We implement a variety of security measures to maintain the safety of your personal information when you use our Platform:
Technical Safeguards
- Encryption of sensitive data in transit and at rest
- Secure HTTPS connections across the entire platform
- Regular security assessments and penetration testing
- Multi-factor authentication options for accounts
- Suspicious activity monitoring and alerts
- Firewalls and intrusion detection systems
Organizational Controls
- Limited employee access to personal information
- Background checks for personnel with data access
- Employee security and privacy training
- Data handling policies and procedures
- Confidentiality agreements with employees
- Incident response plans
Security Partnerships:
For sensitive operations, we partner with industry leaders:
- Payment Processing: All payment information is processed by Stripe, a PCI-DSS Level 1 certified payment processor, the highest level of certification in the payments industry.
- Identity Verification: Seller verification is handled by Stripe Identity, providing secure document verification and identity confirmation without Koopel directly accessing sensitive identification documents.
Important Security Disclaimer:
Despite our best efforts, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are also responsible for maintaining the confidentiality of your account credentials and notifying us of any unauthorized use of your account.
5Your Privacy Rights
Depending on your location, you may have various rights regarding your personal information. We respect these rights and have created processes to help you exercise them:
| Right | Description | How to Exercise |
|---|---|---|
| Access | Request a copy of the personal information we have about you | Email privacy@koopel.com with "Data Access Request" in the subject line |
| Correction | Request that we correct inaccurate or incomplete information | For basic information, update directly in your account settings. For other data, contact us |
| Deletion | Request deletion of your personal information where applicable | Email us with "Data Deletion Request" in the subject line |
| Objection/Restriction | Object to or request restriction of processing of your data | Email us explaining the specific processing you object to |
| Portability | Request a copy of your data in a structured, commonly used, machine-readable format | Email us with "Data Portability Request" in the subject line |
| Withdraw Consent | Withdraw previously given consent for data processing | Adjust settings in your account or contact us directly |
Response Timeline & Verification:
We will respond to all legitimate requests within 30 days. Occasionally, it may take longer if your request is particularly complex. To protect your privacy, we may need to verify your identity before processing your request.
Regional Privacy Rights:
California Residents
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information:
- Know what personal information is collected, used, shared, or sold
- Delete personal information held by businesses
- Opt-out of the sale of personal information
- Non-discrimination for exercising their CCPA rights
European Economic Area (EEA), UK, and Similar Jurisdictions
Under the General Data Protection Regulation (GDPR) and similar laws, you have rights including access, rectification, erasure, restriction of processing, data portability, and objection.
Limitations:
Please note that some of these rights may be limited where we have compelling legitimate grounds or legal obligations to continue processing your information. We will explain any limitations in our response to your request.
7Children's Privacy
Our Platform is not intended for children under 18 years of age, and we do not knowingly collect personal information from children under 18:
- We require all users to be at least 18 years old to create an account and use our services.
- We do not knowingly collect or solicit personal information from anyone under the age of 18.
- If we learn that we have collected personal information from a child under 18 without verification of parental consent, we will delete that information as quickly as possible.
- Our Terms of Service explicitly prohibit users under 18 years of age.
Parent or Guardian Notice:
If you are a parent or guardian and believe we may have inadvertently collected personal information from your child under 18, please contact us immediately at privacy@koopel.com with "Children's Privacy" in the subject line so that we can promptly investigate and delete any such information.
8International Data Transfers
Koopel operates primarily in the United States, but your information may be transferred to, stored, and processed in countries other than the one in which you reside:
How We Transfer Data Internationally:
- When we transfer personal data from the European Economic Area (EEA), the United Kingdom, or Switzerland to countries that may not provide the same level of data protection, we implement appropriate safeguards.
- These safeguards may include Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally-approved mechanisms.
- We assess the laws and practices of recipient countries to ensure your data receives adequate protection.
- Where we use service providers in different countries, we require them to adhere to strict data protection requirements through contractual agreements.
Data Storage Locations:
Your information may be stored and processed in various locations, primarily:
- United States (primary location of our servers and operations)
- Countries where our third-party service providers maintain their servers
- Countries where you access or use our Platform
Your Rights:
Regardless of where your information is processed, we apply the same protections described in this Privacy Policy. Even if you live outside the United States, you can exercise your privacy rights as described in the "Your Privacy Rights" section above.
9Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements:
| Data Category | Typical Retention Period | Reason for Retention |
|---|---|---|
| Account Information | Until account deletion, plus 30 days | To maintain your account and provide our services |
| Transaction Records | Up to 7 years | For tax, accounting, and legal compliance purposes |
| Message History | Up to 3 years after transaction completion | For dispute resolution and customer support |
| Device Information | Up to 2 years | For security, fraud prevention, and service optimization |
| Usage Data | Up to 25 months | For analytics and service improvement purposes |
Factors We Consider:
When determining appropriate retention periods, we consider:
- The amount, nature, and sensitivity of the personal information
- The potential risk of harm from unauthorized use or disclosure
- The purposes for which we process the data and whether we can achieve those purposes through other means
- Applicable legal, accounting, or regulatory requirements
- Potential or ongoing litigation or disputes
- Your expectations and preferences
Account Deletion:
When you delete your account, we initiate a process to anonymize or delete your personal information from our active systems. However, some information may remain in backups or archived copies for a limited time. Additionally, we may retain certain information as required for legal, tax, or accounting purposes even after account deletion.
10Third-Party Services and Links
Our Platform may contain links to third-party websites and services, and we may use third-party services to help operate our business:
Third-Party Services We Use
- Payment Processing: Stripe
- Identity Verification: Stripe Identity
- Analytics: Google Analytics
- Cloud Services: AWS, Google Cloud
- Email Services: SendGrid
- Customer Support: Zendesk
External Links on Our Platform
- Social Media Links: To our official social media pages
- Resource Links: To helpful information on third-party sites
- Advertising Links: From our marketing partners
- User-Generated Links: In product descriptions or profiles
Important Note About Third-Party Privacy Practices:
This Privacy Policy applies only to our Platform. When you use third-party services or visit third-party websites linked from our Platform, their privacy policies govern the collection and use of your information. We encourage you to read the privacy policies of all third-party services and websites you visit.
Our Third-Party Service Provider Requirements:
When we share information with third-party service providers, we:
- Only provide the information they need to perform their specific services
- Require them to use your information only for the purposes we specify
- Require them to implement appropriate security measures
- Prohibit them from using your data for their own marketing purposes without your consent
11Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors:
How We'll Notify You of Changes:
- We will post the updated Privacy Policy on our Platform with a new "Last Updated" date.
- For material changes, we will provide additional notice such as:
- Email notifications to registered users
- In-app notifications or banners
- A prominent notice on our homepage
- We may request renewed consent when required by applicable law.
What Constitutes a Material Change:
Material changes typically include:
- Changes to the types of personal information we collect
- New purposes for processing your data
- New categories of third parties with whom we share data
- Significant changes to your rights or our security practices
- Changes that may limit your privacy rights or increase our use of your data
Your Continued Use:
Your continued use of the Platform after we post changes to the Privacy Policy means you accept and agree to the updated terms. If you do not agree with the updated Privacy Policy, you should discontinue using our services and close your account.
12Contact Information
If you have any questions, concerns, or feedback regarding this Privacy Policy or our privacy practices, please contact us through one of the following methods:
Email Contact
Privacy Questions: privacy@koopel.com
Data Access Requests: privacy@koopel.com
General Support: support@koopel.com
Mailing Address
MOWA LABS LLC
Attn: Privacy Officer
1317 Edgewater Dr #307
Orlando, FL 32804
United States
Response Timeframe:
We strive to respond to all legitimate privacy inquiries within 30 days. For complex requests, we may take up to 60 days to respond, but we will notify you if this is the case and explain why.
Data Protection Authority:
If you are a resident of the European Economic Area and believe we are processing your personal data unlawfully, you have the right to file a complaint with your local data protection authority. However, we would appreciate the opportunity to address your concerns directly before you approach a data protection authority.
Your Privacy Choices
By using Koopel, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.