Privacy Policy

Koza is the commerce service at koza.cc. This note covers the platform — not a merchant's own storefront, which the merchant controls.

Who we are

Koza provides multi-tenant store software and white-label payments labeled Koza Payments. We are not a Merchant of Record. Merchants sell their own goods and remain responsible for their buyers.

What we collect

• Account details you submit at signup: name, email, password (hashed), store name and slug.
• Store catalog, orders, customers, and settings you enter in admin.
• Payment metadata needed to settle a charge (amount, status, processor references). Card numbers are collected by the payment processor — Koza does not store PAN.
• Session cookies so you stay signed in, plus basic request logs for abuse prevention.

How we use it

To run your store, process payments through Koza Payments, settle payouts on a T+5 hold, send transactional mail you trigger, and keep the service secure. We do not sell personal data.

Merchants and their buyers

When a shopper checks out on a Koza storefront or Checkout API session, the merchant is the controller of that customer relationship. Koza processes that data to complete the order and settlement. Buyer-facing privacy for a store is the merchant's to publish.

Processors and subprocessors

Payments go through the processor behind Koza Payments. Hosting, email, and similar infrastructure vendors process data only to provide the service.

Retention and your choices

Account and store data last as long as the account is active. You can export or request deletion from admin (Account) or by contacting the operator of koza.cc. Session cookies can be cleared in your browser; that signs you out.

Contact

Questions: the operator of koza.cc. Related: Terms and Pricing.