Privacy Policy

This policy explains how Kopimore collects, uses, shares, and protects information in connection with our visitor intelligence platform and website.

Effective Date: May 1, 2026 Last Updated: May 1, 2026 Jurisdiction: United States

1. Overview

Kopimore, Inc. ("Kopimore," "we," "our," or "us") operates a visitor intelligence platform that helps businesses identify and enrich anonymous website visitor profiles. This Privacy Policy applies to (a) visitors to our website at kopimore.com and its subdomains, (b) end users who access our client portal, and (c) individuals whose data may appear in our identity graph as a result of our pixel-based identification services.

We take privacy seriously. Our platform is designed with compliance at its core — built to operate within the requirements of the California Consumer Privacy Act (CCPA), the CAN-SPAM Act, the Telephone Consumer Protection Act (TCPA), and, where applicable, the General Data Protection Regulation (GDPR).

Summary: Kopimore identifies anonymous website visitors using a pixel-based identity graph. If you are a consumer who wishes to opt out of identification, submit a data deletion request, or learn what data we hold about you, see Section 13 or email privacy@kopimore.com.

2. Who We Are

The data controller for information collected through kopimore.com is:

Kopimore, Inc.
Email: privacy@kopimore.com
For general inquiries: support@kopimore.com

For data collected through our pixel deployed on third-party customer websites, Kopimore acts as a data processor on behalf of the customer (the data controller). Customers are responsible for their own privacy disclosures and consent mechanisms on their websites.

3. Data We Collect

Our identity graph and enrichment pipeline may collect, infer, or associate the following categories of data with identified individuals. Fill rates vary by record — identity fields are delivered on every match, while professional and firmographic fields are delivered where available from our data partners.

3.1 Identity & Contact Data (delivered on every match)

FieldDescriptionAvailability
First & Last NameFull legal name of the visitorAlways
Home AddressStreet address, city, state, zip, zip+4Always
Personal Email(s)One or more personal email addressesAlways
Verified EmailEmail addresses confirmed as deliverableUsually
Hashed Email (SHA-256)Cryptographic hash of personal email(s)Always
Landline Phone(s)Residential phone number(s) with DNC statusAlways
Mobile Phone(s)Mobile number(s) with DNC statusAlways

3.2 Demographic & Household Data (delivered on every match)

FieldDescriptionAvailability
Age RangeBucketed age range (e.g., 35–44)Always
GenderInferred or self-reported genderAlways
Income RangeEstimated household income bracketAlways
Net Worth TierEstimated net worth rangeAlways
Homeowner StatusHomeowner or renterAlways
Marital StatusMarried / single / otherUsually
Children IndicatorWhether household includes childrenOften

3.3 Professional & Firmographic Data (where available)

FieldDescriptionAvailability
Company NameCurrent employer~56%
Company DomainBusiness website domain~56%
Company IndustryPrimary industry classification~48%
Employee CountCompany headcount range~51%
Company RevenueEstimated annual revenue range~50%
Company AddressBusiness mailing address~54%
Company PhoneMain business phone number~48%
Company LinkedIn URLLinkedIn company page~51%
Business EmailWork email address~43%
Job TitleCurrent job title~40%
DepartmentFunctional department~32%
Seniority LevelCareer seniority (e.g., Director, Staff)~38%
Job Title HistoryPrior job titles~33%
Company HistoryPrior employers~33%
Education HistoryDegree and institution~22%
Individual LinkedIn URLPersonal LinkedIn profile~36%

3.4 Session & Behavioral Data

FieldDescriptionAvailability
Pixel IDUnique identifier for the customer's pixelAlways
Event TimestampDate and time of the visitAlways
Full URLComplete URL of the page visitedAlways
Referrer URLTraffic source (e.g., google.com, instagram.com)Always
UTM ParametersCampaign tracking parameters in URLWhen present

3.5 Data We Do NOT Collect

Kopimore does not collect Social Security numbers, government ID numbers, financial account numbers, precise geolocation (GPS coordinates), biometric data, or medical records. We do not target minors under age 13.

4. How We Collect Data

4.1 Pixel-Based Collection

Kopimore customers install a JavaScript pixel on their websites. When a visitor loads a page containing the pixel, the pixel fires an event to Kopimore's servers containing the visitor's hashed email identifier (if available from browser state) and session metadata (URL, referrer, timestamp). We then cross-reference this signal against our identity graph to resolve the visitor's identity and return an enriched profile to the customer.

4.2 Identity Graph

Our identity graph contains over 250 million consumer and business profiles sourced from licensed data partners, public records, and opt-in data providers. Identity resolution is performed by matching browser signals against this graph using privacy-safe matching techniques, including hashed email matching (HEM/SHA-256).

4.3 Direct Collection on kopimore.com

When you interact with kopimore.com directly — for example, by signing up for an account, filling out a contact form, or using the ROI calculator — we collect information you voluntarily provide, including your name, email address, company name, and website URL.

4.4 Cookies & Tracking Technologies

We use standard cookies and local storage for session management, authentication, and analytics. We do not sell data collected via our own website cookies to third-party advertisers.

5. How We Use Data

We use collected data for the following purposes:

  • Visitor Identification: Resolving anonymous website visitor identities on behalf of our customers using our identity graph.
  • Enrichment Delivery: Appending additional data fields (demographics, professional info, firmographics) to identified visitor profiles and delivering them to customers via API, webhook, or CRM integration.
  • Platform Operation: Running our client portal, processing payments, providing customer support, and improving platform reliability.
  • Product Improvement: Analyzing aggregate, de-identified usage data to improve identification accuracy and match rates.
  • Legal Compliance: Fulfilling data subject rights requests, maintaining DNC suppression lists, and complying with applicable law.
  • Communications: Sending transactional emails (account confirmations, password resets, invoice receipts) and, with your consent, product updates.

Customer responsibility: Kopimore delivers enriched profiles to customers who are responsible for their own downstream use of that data, including compliance with CAN-SPAM, TCPA, and CCPA when contacting identified individuals.

6. Sharing & Disclosure

We share personal data in the following circumstances:

  • With Customers: Enriched visitor profiles are delivered to the Kopimore customer whose pixel triggered the identification event.
  • Service Providers: We share data with vendors who help us operate our platform (cloud hosting, payment processing, analytics). These vendors are contractually bound to process data only as directed by us.
  • Data Partners: We license data from and share match keys with identity data providers who contribute to our graph. These partners are bound by data use agreements.
  • Legal Requirements: We may disclose data where required by law, court order, or to protect the rights, property, or safety of Kopimore, our customers, or the public.
  • Business Transfers: In the event of a merger, acquisition, or asset sale, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

We do not sell personal data to third-party advertisers or data brokers outside the scope of our identity graph operations.

7. Data Retention

Enriched visitor profile records are retained by Kopimore in our event logs for up to 24 months from the date of the identification event, unless a shorter retention period is requested by the customer or required by law.

Customer account data (name, email, billing information) is retained for the duration of the customer relationship and for up to 7 years thereafter for tax and legal compliance purposes.

Consumer opt-out records are retained indefinitely to honor suppression requests.

8. Security

Kopimore employs industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits. Access to production data is restricted to authorized personnel on a need-to-know basis.

No method of transmission or storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. If you become aware of a security issue related to our platform, please contact security@kopimore.com.

9. California Consumer Privacy Act (CCPA)

If you are a California resident, you have the following rights under the CCPA (as amended by the California Privacy Rights Act, CPRA):

Right to Know

Request disclosure of the categories and specific pieces of personal information we have collected about you over the past 12 months.

Right to Delete

Request that we delete personal information we have collected from or about you, subject to certain exceptions.

Right to Correct

Request correction of inaccurate personal information we maintain about you.

Right to Opt Out

Opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising.

Right to Limit

Limit our use and disclosure of your sensitive personal information to certain permitted purposes.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, use the opt-out form in Section 13 or email privacy@kopimore.com. We will respond within 45 days. You may also designate an authorized agent to submit requests on your behalf.

10. GDPR (EEA & UK Residents)

For individuals in the European Economic Area or United Kingdom, our legal basis for processing personal data in the context of our identity graph is legitimate interests — specifically, enabling our business customers to identify and follow up with website visitors who have demonstrated interest in their products or services.

You have the right to: access your data, rectify inaccurate data, request erasure ("right to be forgotten"), object to processing, request restriction of processing, and data portability. You also have the right to lodge a complaint with your local supervisory authority.

To exercise your GDPR rights, email privacy@kopimore.com with the subject line "GDPR Rights Request."

Note: Our pixel-based identification service is primarily designed for and deployed on U.S.-based websites. We do not knowingly process personal data of EEA residents without appropriate safeguards in place.

11. TCPA, CAN-SPAM & DNC Compliance

All phone number records delivered by Kopimore include Do Not Call (DNC) status flags at the federal and state registry level. Kopimore customers who use phone numbers delivered by our platform are responsible for independently verifying DNC compliance and obtaining any required consent before placing calls or sending text messages under the Telephone Consumer Protection Act (TCPA).

Email addresses delivered by Kopimore are for outbound marketing purposes. Customers are responsible for complying with the CAN-SPAM Act, including including a functional unsubscribe mechanism in all commercial emails and honoring opt-out requests promptly.

Kopimore maintains its own suppression list of individuals who have opted out of identification. Records on the Kopimore suppression list are excluded from all future deliveries.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect or maintain personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@kopimore.com and we will delete it promptly.

13. Opt-Out & Data Requests

You can submit a data access, deletion, correction, or opt-out request using the form below. We will respond within 45 days. All requests are free of charge and we will not discriminate against you for submitting one.

Submit a Privacy Request

Enter your email address and select the type of request. We will verify your identity and respond within 45 days.

✓ Request received. We'll respond to your email within 45 days.

You can also email your request to privacy@kopimore.com with the subject line matching your request type (e.g., "Data Deletion Request" or "CCPA Opt-Out").

14. Contact Us

If you have questions about this Privacy Policy, our data practices, or to exercise your rights, contact us at:

Kopimore Privacy Team
Email: privacy@kopimore.com
General inquiries: support@kopimore.com

We reserve the right to update this Privacy Policy from time to time. We will notify registered customers of material changes via email. Your continued use of our platform following any update constitutes acceptance of the revised policy.