Privacy

Nakodo is run by Daniel Pertu, a sole trader. We decide how the personal data described here is used, which makes us its controller under data protection law (UK GDPR and, for people in the EU, EU GDPR).

Contact us about anything in this notice at hello@nakodo.app.

Nakodo sets no tracking cookies. The only cookies keep you signed in, which the law treats as strictly necessary, so we don't ask for consent. There are no ad pixels and no third-party analytics, on this site or in the app.

To show prices in your currency, our host tells us which country your IP address is in. We don't store it, except that the country goes to Stripe with your payment when you check out, where it decides how VAT is handled.

We store your email address, your name, your company name if you give it, and whether you are a brand or an agency. Your name signs your outreach drafts unless you write your own signature.

We also store your campaigns, the briefs we write from your website, your drafts, your plan and how much of it you have used, and a log of account activity such as sign-up, accepting the terms, password changes, plan changes and exports. The log does not record IP addresses.

We use this to provide Nakodo under our terms (the legal basis is our contract with you). We keep the activity log because we have a legitimate interest in keeping accounts secure and settling disputes.

We send the emails needed to run your account: confirming your address, resetting your password, and one email per campaign when its first good-fit creators are in. We don't send marketing emails.

Nakodo helps businesses find creators to work with. To do that, we hold information about YouTube channels, which can include personal data about the people who run them.

• Public channel and video information from the YouTube Data API: channel name, handle, description, country, subscriber and view counts, and recent videos.
• Contact details you have published for business enquiries: in your channel description, your video descriptions, or on your own website or link page when your channel links to it. Each one is stored with where it was found.
• Counts from your public comments, such as how many are questions and which languages they are in. We don't store comment text or who wrote it.
• A fit score and a short summary, written by software for each business's campaign.

We never get around captchas or log in as anyone. Businesses using Nakodo see a channel's contact details only after they unlock them, and our terms require them to contact you one to one, about a relevant collaboration, and to stop if you ask.

Our legal basis is legitimate interests: ours and our customers' interest in finding creators for business collaborations, using details creators chose to publish for that purpose. We limit what we keep to support that, and delete YouTube data within 30 days unless it is refreshed.

Scores are worked out automatically but don't decide anything about you on their own: a person chooses whether to get in touch.

You can object at any time. Email hello@nakodo.app with a link to your channel and we will delete what we hold about you. If you are under 18, please tell us and we will remove your channel.

These companies process data for us, only to run Nakodo:

• Supabase, for sign-in, account emails and the database.
• Vercel, to host the site and run scheduled work.
• OpenAI, to write briefs, explain fits and draft messages. We send it your website text, public creator information and your outreach settings. It doesn't use this to train its models.
• Google, for the YouTube Data API.
• Resend, to send campaign emails.
• Stripe, to take payment for paid plans. It receives your email address, billing details and card. We never see or store your card number. If you are in the European Union, Link, Stripe's reseller service, may sell you the subscription and receives the same details as the seller.

Some of them process data outside the UK and the EU, including in the United States. Where they do, the transfer is covered by the safeguards the law requires, such as the UK–US data bridge or standard contractual clauses.

Customers who unlock a creator's contact details also receive them, and are responsible for how they use them.

Nakodo uses YouTube API Services. Google's use of data is covered by the Google Privacy Policy, and use of YouTube by the YouTube Terms of Service. Nakodo doesn't ask for access to your Google or YouTube account.

• Your account, campaigns and drafts: until you delete them or your account. Deleting your account removes your profile, campaigns, drafts and plan straight away.
• Payment records: Stripe keeps invoices and payments for as long as tax and accounting law requires, which can be after you delete your account. Deleting your account removes your saved card from Stripe.
• YouTube data, including contact details found through it: refreshed or deleted within 30 days.
• The activity log: kept after an account is deleted, no longer linked to it, for as long as it is needed for security and to settle disputes.

You can ask for a copy of your data, and ask us to correct it, delete it, limit how we use it, or stop using it. From Settings you can download everything we hold about your account as a JSON file, and delete your account.

For anything else, email hello@nakodo.app. We reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO), or the data protection authority where you live.

Nakodo is for businesses and isn't meant for anyone under 18.

When this notice changes, we update the date at the top. If a change affects how we use your data in a way that matters, we email account holders first.