PRIVACY POLICY

privacy.

This is not the final Privacy Policy.

Who we are

Pollux is run by Koed Pay LLC, a Delaware company. KEA.media is our studio brand. Questions: hello@pollux.team.

Where you live

By using Pollux you confirm that you don’t live in Illinois, Texas, Washington or Colorado.

Who handles your data when you create a Digital ID

At this step your data is handled by KEA.media, Vercel (website and private file storage), Neon (account database) and Resend (email). No AI provider.

How long we keep it

You can delete your Digital ID at any time, from any KEA.media email or from your account. If you don’t confirm your email within 24 hours of recording, the recordings are deleted. If you don’t continue, your Digital ID is deleted 90 days after it is created. After a deletion, the recordings are destroyed within 30 days; only a record of this consent and of the deletion, with no photos or recordings, is kept for 5 years.

Photos and videos you send

What you send us in the app (photos, videos and the line you add) is kept for 30 days, or until 14 days after the post that uses it goes out if that is later. Then we delete it.

You can delete it sooner in your account: Posts, then Delete now. If you choose Keep my media, we keep it while that’s on, and for 30 days after it ends.

Your own AI agent

On a plan that includes it, you can connect your own AI agent (an AI assistant or tool you use) to your account with an agent key. You create and revoke keys in your account, under Settings, AI agents. A revoked key stops working at once. We store each key only as a keyed hash, with its last four characters, its name, what it may do, and when it was made and last used, so we can’t show the key again.

Your agent sees and does only what you allow for its key: your plan, its limits and your connected networks; your briefs, posts and calendar; sending us briefs with photos or videos and a preferred time; trend cards; and your Replies cards, only if you tick them.

It can’t approve, publish, stop or delete a post, send or hide a reply, connect or disconnect a network, or change your settings. A post made from your agent’s brief waits for your own approval in Pollux. If your agent tells us its photos or videos were made or changed with AI, the post is labelled as made with AI. What your agent sends us is kept like what you send in the app (above).

Replies cards hold other people’s comments and messages, their names and handles, and the answers we drafted. They reach your agent only if you tick them for its key. You choose your agent and the AI provider behind it: their own terms and privacy policy apply to what it receives.

For each call an agent makes, we log the time, which key made the call (its ID, not the key itself), the tool or endpoint, the result code, how long it took and a hashed form of the caller’s IP address. We never log what the call carried: no text, no photos or videos, not the key. We keep this log for 90 days, to keep Pollux secure and to look into problems and misuse, then delete it.

Advertising measurement

We advertise Pollux on Instagram, Facebook and TikTok. To learn which of our ads bring visitors and sales, we use the measurement tools of two advertising companies: Meta Platforms (Meta Platforms, Inc.; in the EU, the EEA and the UK, Meta Platforms Ireland Limited) and TikTok (TikTok Inc. and the TikTok company that provides its advertising services where you live). We use them only if you accept, wherever you are: until you do, their code isn’t loaded and our servers send them nothing about you.

They never run where you sign in, in your account, on the pages where you create a Digital ID or record your face or voice, or in our app and Telegram bot. They run only on our public pages (the home page, Why Pollux, Studio, Pricing, Rewards and AI agents) and on the page you come back to after paying.

What is shared

If you accept, these companies receive:

Our servers send the checkout and payment events too, with the same details, so that each is counted once and isn’t lost when a page closes. We never send your name, your face or voice, what you post, or anything else from your account.

Why

To count visits and sales per ad, to see which ads are worth paying for, and to let these companies show our ads to people likely to be interested. Each company also uses this data for its own purposes under its own privacy policy, including to show you ads elsewhere. They give us reports on how our ads perform, never data about you.

California and other US states

We don’t sell personal information for money. When you accept, letting these companies collect data on our site for advertising that may reach you elsewhere is “sharing” for cross-context behavioral advertising under California law, and may be a “sale” or “targeted advertising” under the laws of other states. If you accepted, we shared these categories with advertising companies, for the purposes above: identifiers (cookie and click identifiers, IP address, hashed email address), internet activity on our site (pages viewed and the events above) and commercial information (the plan bought and its price). If you didn’t accept, we shared nothing. Pollux is for adults, and we don’t knowingly share data about anyone under 16.

How to say no

Choose Reject on the banner, or go to Your Privacy Choices (the link at the bottom of our pages) to say no or change your answer at any time. If your browser sends a Global Privacy Control signal, we treat it as a no for that browser without asking you anything, and Your Privacy Choices shows “Opt-Out Request Honored”. If you are signed in when you say no, or when your browser sends that signal, we also record the no on your account: then purchases on it are never reported to these companies, and their code doesn’t load wherever you are signed in, unless you accept again while signed in. Saying no changes nothing else on Pollux.

Your answer is kept in a cookie in that browser, so on another browser or device you are asked again, unless you are signed in there with an account that said no. When you choose Reject, we delete the cookies these companies’ code set on our site, as far as our site can reach them.

Our own link labels

When you arrive through a link of ours that carries campaign labels (utm_ parameters) or an ad click identifier, we keep them in a cookie of our own for 7 days, on our site only. If you buy, we copy the campaign labels onto your purchase, so we can count sales per ad ourselves, without any other company. If you said no, or your browser sends Global Privacy Control, we keep the labels but not the click identifier. In the EU, the EEA, the UK and Switzerland, and wherever we can’t tell where you are, we set this cookie only after you accept.

Joint responsibility, consent and transfers

For collecting this data on our site and sending it to them, we and each company are jointly responsible; what each company does with it afterwards is its own responsibility. In the EU, the EEA and the UK our legal basis is your consent, which you can withdraw at any time on Your Privacy Choices; that doesn’t affect what was sent before. These companies may process the data in the United States and other countries.

How long it is kept

Your choices

You can delete your Digital ID at any time, from the link in any of our emails or at pollux.team/me/id. Nothing is published without your yes.

To say no to ad measurement, or to change your answer, go to Your Privacy Choices.

Face and voice data

How we record, use, keep and destroy face and voice data: the Biometric Policy.

The EU, the EEA and the UK

If you live in the EU, the EEA or the UK, this part applies to you.

Controller

Koed Pay LLC, a Delaware company, which runs Pollux and KEA.media. Contact: hello@pollux.team.

What we use your data for, and why we may

Transfer to the United States

Pollux is run from the United States, and your data is stored there (Vercel, Neon, Resend): your account from the moment you sign up, your Digital ID from the moment you create it.

If you accept ad measurement, Meta Platforms and TikTok also receive the data described under “Advertising measurement”, and may process it in the United States and other countries.

We ask your explicit consent to this transfer, and to the use of your face and voice, on the consent screen before you record. If we only learn later that you’re in the EU, the EEA or the UK (for example from where you sign in), we email you the same two consents. Until you give both, nothing is made with your face or voice, and that Digital ID is deleted 30 days after our last reminder.

How long

As above for your recordings, what you send us, the agent call log, the ad measurement data and your agreements; your account data while your account is open.

Your rights

To delete your Digital ID, go to pollux.team/me/id. For anything else, write to hello@pollux.team.

Our representatives

We are appointing a representative in the EU and one in the UK (Article 27 of the GDPR and of the UK GDPR). Their names and contact details will be added here.

Terms

Using Pollux also means accepting the Terms of Service.