1. Introduction
Kindling (“Kindling,” “we,” “us,” or “our”) operates the website located at kindlinghq.com and related services (collectively, the “Service”). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our website, create an account, or use our platform.
By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.
2. Information we collect
Information you provide directly
We collect information you voluntarily provide when you register for an account, complete forms, apply to advocacy programs, or communicate with us. This may include:
- Name, email address, and contact information
- Company name, job title, and professional details
- Account credentials (managed through our authentication provider)
- Payment and payout information (processed through Stripe; see Section 6)
- Content you submit, including creator applications and program descriptions
- Communications you send to us, such as support requests or feedback
Information collected through third-party authentication
When you sign up or sign in using a third-party service such as LinkedIn, we receive certain profile information from that service. See Section 3 for specific details about LinkedIn data.
Information collected automatically
When you access or use the Service, we may automatically collect:
- Device information (browser type, operating system, device identifiers)
- Log data (IP address, access times, pages viewed, referring URL)
- Usage data (features used, actions taken within the Service)
- Cookies and similar tracking technologies (see Section 7)
3. LinkedIn data & OAuth
This section specifically addresses our collection and use of data obtained through LinkedIn's OAuth authentication, in compliance with LinkedIn's API Terms of Use.
What LinkedIn data we collect
When you authenticate your account using LinkedIn (“Sign in with LinkedIn”), we request access to the following data from your LinkedIn profile:
| Data Type | Description |
|---|---|
| Basic profile | First name, last name, and profile picture |
| Email address | The primary email address associated with your LinkedIn account |
| LinkedIn ID | A unique, application-specific identifier assigned by LinkedIn |
| OpenID Connect claims | Standard identity claims provided through LinkedIn's OpenID Connect flow |
We request only the minimum data necessary to create and maintain your Kindling account and to verify your identity on the platform.
When we collect LinkedIn data
We access your LinkedIn profile data at the following times:
- At initial authentication: When you first sign up or sign in using LinkedIn, we retrieve your basic profile information and email address to create or locate your Kindling account.
- At subsequent sign-ins: When you sign in using LinkedIn on future visits, we may retrieve updated profile information (such as your name or profile picture) to keep your Kindling account current.
We do not continuously or periodically pull data from your LinkedIn profile outside of these authentication events.
How we use LinkedIn data
Data obtained through LinkedIn OAuth is used exclusively to:
- Create and authenticate your Kindling account
- Display your name and profile picture within the Kindling platform
- Communicate with you about your account and the Service
- Verify your identity in connection with advocacy programs
We do not sell, rent, or share your LinkedIn data with third parties for their own marketing purposes. We do not use LinkedIn data to send unsolicited messages on LinkedIn or to contact your LinkedIn connections.
How to withdraw consent for LinkedIn data access
You may withdraw your consent for Kindling to access your LinkedIn data at any time by:
- Revoking access through LinkedIn: Visit your LinkedIn Settings > Data Privacy > Permitted Services, locate Kindling, and remove access.
- Contacting us: Email privacy@kindlinghq.com to request disconnection of your LinkedIn account.
- Deleting your account: Deleting your Kindling account will also remove all stored LinkedIn data (see Section 11).
Withdrawing consent may limit your ability to use certain features of the Service that rely on LinkedIn authentication.
4. Google data & OAuth
This section specifically addresses our collection and use of data obtained through Google's OAuth authentication, in compliance with the Google API Services User Data Policy.
What Google data we collect
When you authenticate your account using Google (“Sign in with Google”), we request access to the following data from your Google account:
| Data Type | Description |
|---|---|
| Basic profile | Name and profile picture associated with your Google account |
| Email address | The email address associated with your Google account |
| OpenID identifier | A unique identifier provided by Google to authenticate your account |
We request only the minimum scopes necessary to create and maintain your Kindling account and to verify your identity on the platform. We do not request access to your Google Drive, Gmail, Google Calendar, contacts, or any other Google services beyond basic authentication.
When we collect Google data
We access your Google account data at the following times:
- At initial authentication: When you first sign up or sign in using Google, we retrieve your basic profile information and email address to create or locate your Kindling account.
- At subsequent sign-ins: When you sign in using Google on future visits, we may retrieve updated profile information (such as your name or profile picture) to keep your Kindling account current.
We do not continuously or periodically pull data from your Google account outside of these authentication events.
How we use Google data
Data obtained through Google OAuth is used exclusively to:
- Create and authenticate your Kindling account
- Display your name and profile picture within the Kindling platform
- Communicate with you about your account and the Service
We do not sell, rent, or share your Google user data with third parties for their own marketing purposes. We do not use Google data for serving advertisements, retargeting, or interest-based advertising. We do not use Google data to determine creditworthiness or for lending purposes.
Google API Services User Data Policy compliance
Kindling's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We limit our use of Google user data to the practices explicitly disclosed in this Privacy Policy.
- We do not transfer Google user data to third parties except as necessary to provide or improve the Service, to comply with applicable laws, or as part of a merger or acquisition (with prior notice to users).
- We do not use Google user data for serving ads or for any purpose unrelated to the core functionality of the Service.
- We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes, it is necessary to comply with applicable law, or our use is limited to internal operations with aggregated and anonymized data.
How to withdraw consent for Google data access
You may withdraw your consent for Kindling to access your Google data at any time by:
- Revoking access through Google: Visit your Google Account permissions page, locate Kindling, and remove access.
- Contacting us: Email privacy@kindlinghq.com to request disconnection of your Google account.
- Deleting your account: Deleting your Kindling account will also remove all stored Google data (see Section 11).
Withdrawing consent may limit your ability to use certain features of the Service that rely on Google authentication.
5. How data is shared within the Kindling marketplace
Kindling is a two-sided marketplace connecting brands with advocate creators. This section explains how information you submit is shared with other users on the platform as part of normal platform operations.
Kindling connects two types of users: brands (companies running advocacy programs) and creators (verified customers who create content). For the platform to function, certain information that you submit is shared with other users. By using the Service, you acknowledge and consent to the data sharing described below.
If you are a brand
The following information you submit may be visible to creators on the platform:
- Program details: Advocacy program descriptions, content guidelines, eligibility criteria, and other program information you publish.
- Compensation rates: Published payout rates, payment terms, and compensation structures associated with your programs.
- Company information: Your company name, logo, and other brand information you provide when creating programs.
Creators who browse, apply to, or participate in your programs will see this information as part of normal platform functionality.
If you are a creator
The following information you submit may be visible to brands on the platform:
- Creator profile: Your name, profile picture, and professional information you provide in your Kindling profile.
- Program applications: When you apply to an advocacy program, the brand running that program may see your application details, including any information you submit as part of the application.
- Submitted content: Posts, content links, and other materials you submit as part of an advocacy program will be visible to the brand that operates that program.
- Performance data: Content performance metrics (such as engagement data) associated with your submitted posts may be shared with the brand operating the program, to the extent such data is available and tracked by the platform.
- Payout history: Transaction records and payout status related to a specific program may be visible to the brand operating that program.
What is not shared between marketplace participants
The following information is never shared with other users on the platform:
- Your email address, unless you choose to share it directly
- Your authentication credentials or OAuth tokens
- Your payment instrument details (bank account, card numbers, etc.)
- Your activity on programs operated by other, unrelated brands
- Private communications with Kindling support
You control what information you submit to the platform. Any content or data you choose not to submit will not be shared. However, certain information (such as your name and profile) is required to participate in advocacy programs.
6. How we use your information
We use the information we collect for the following purposes:
- Providing the Service: To create and manage your account, process transactions, facilitate advocacy programs, and deliver the features you request.
- Communication: To send you transactional emails (account confirmations, payout notifications, program updates), respond to inquiries, and provide customer support.
- Improvement and analytics: To understand how the Service is used, identify trends, diagnose technical issues, and improve our platform's functionality and user experience.
- Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, abuse, and security threats.
- Legal compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
- Marketing (with consent): To send you promotional communications about Kindling, but only where you have opted in or where permitted by applicable law. You can opt out at any time.
8. Payment processing
Kindling uses Stripe to process payments and creator payouts. When you provide payment information or set up a payout account, that financial data is collected and processed directly by Stripe in accordance with Stripe's Privacy Policy.
We do not store your full credit card number, bank account number, or other sensitive payment credentials on our servers. We receive only limited information from Stripe (such as the last four digits of a card, transaction amounts, and payout status) to display transaction history and manage your account.
For creators receiving payouts through Stripe Connect, Stripe may collect additional identity verification information as required by applicable financial regulations. This data is handled directly by Stripe.
10. Data retention
We retain your personal information for as long as your account is active or as needed to provide you with the Service. We may also retain and use your information as necessary to:
- Comply with legal obligations (e.g., tax and financial reporting requirements)
- Resolve disputes and enforce agreements
- Maintain security and prevent fraud
When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes as described above. LinkedIn profile data obtained through OAuth will be deleted upon account deletion or upon your request. Google user data obtained through OAuth will be deleted upon account deletion or upon your request.
11. Your rights & choices
Depending on your location and applicable law, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete personal information.
- Deletion: Request deletion of your personal information. You can delete your account at any time through your account settings, or by contacting us at privacy@kindlinghq.com.
- Portability: Request a machine-readable copy of your personal information.
- Withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. This includes withdrawing consent for LinkedIn data access (see Section 3) and Google data access (see Section 4).
- Opt out of marketing: Unsubscribe from marketing emails using the link in any marketing communication, or contact us directly.
- Restrict processing: Request that we limit how we use your personal information in certain circumstances.
To exercise any of these rights, contact us at privacy@kindlinghq.com. We will respond to your request within 30 days (or sooner if required by applicable law). We may ask you to verify your identity before processing your request.
California residents
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information as defined under the CCPA.
European Economic Area, UK, and Switzerland residents
If you are located in the EEA, UK, or Switzerland, we process your personal information based on one or more of the following legal bases: your consent, the performance of a contract with you, our legitimate business interests, or compliance with legal obligations. You have the right to lodge a complaint with your local data protection authority if you believe we have violated applicable data protection law.
12. Data security
We implement commercially reasonable technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/SSL), secure cloud infrastructure, access controls, and regular security reviews.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.
13. International data transfers
Kindling is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that are different from the laws of your country.
Where required by applicable law, we implement appropriate safeguards for international data transfers, including standard contractual clauses or other mechanisms approved by relevant regulatory authorities.
14. Children's privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as promptly as possible. If you believe a child has provided us with personal information, please contact us at privacy@kindlinghq.com.
15. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the “Last Updated” date at the top of this page and, where appropriate, providing additional notice (such as an email notification or an in-app announcement).
Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
16. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Kindling
Email: privacy@kindlinghq.com
Website: kindlinghq.com