Privacy Policy
This Policy explains how KUNN Group collects, holds, uses and discloses personal information in connection with the Kunn Leads & Referral Marketplace.
1.Introduction
KUNN Group operates the Kunn Leads & Referral Marketplace, a platform where members refer client opportunities they cannot service and eligible businesses acquire verified, consented introductions to those opportunities.
Kunn is available in Australia, the United States and the United Arab Emirates, subject to account type and market eligibility. Joining Kunn is free. Kunn Gold is an optional paid annual upgrade.
We respect the privacy of our members, the businesses that use the platform, clients whose information is provided in connection with an opportunity, and visitors to our website.
This Policy describes what personal information we collect, why we collect it, how we hold and use it, and when it may be shared with others. KUNN Group is an Australian business and this Policy is framed by reference to Australian privacy requirements. Where other privacy or data-protection laws apply to you because of where you are located, those laws may give you additional rights, and we will handle requests consistently with the laws that apply.
If you have any questions about this Policy, you can contact us at info@kunngroup.com.
2.Information Kunn collects
Account information
When you create and use a Kunn account, we may collect:
- full name
- email address
- phone number
- account and authentication information
- your account market (Australia, United States or United Arab Emirates)
- your account type (Individual or Business)
- your Kunn marketplace identifier (KUNN-ID)
- profile photograph or avatar, where you provide one
Passwords are handled by the authentication service that supports the platform. Kunn staff do not have access to your password.
Business information
Members can provide business details for their profile and listing, including:
- business name
- business registration details, such as an ABN, where provided for verification
- business website
- business contact details
- business description
- industries and categories
- locations served
- languages
- services offered
- logos and cover images
- LinkedIn or other professional profile information, where provided
Verification information
Verification on Kunn may involve some or all of the following:
- email verification
- phone verification
- business information
- registered business details
- identity documents
- business supporting documents
- website verification
- LinkedIn information
- address information
Government-issued identity documents and supporting business documents are held in private storage and are only accessible through authorised Kunn administrative processes.
Opportunity and client information
Members submit individual referral opportunities. An opportunity may include information such as:
- client name
- client location
- client email address
- client phone number
- opportunity description
- industry or category
- estimated opportunity value
- referral fee, or that the opportunity is Open to Offers
- other information reasonably required to manage the opportunity
Kunn does not provide bulk CRM, database or CSV importing of client opportunities. Opportunities are submitted individually by members.
Applications, offers and platform activity
We collect information generated as you use the platform, including:
- opportunity applications and application messages
- offers submitted on Open to Offers opportunities, and offer outcomes
- application and opportunity status
- opportunity lifecycle information
- client authority declarations and client consent records
- handover records showing when client contact details were released and to whom
- ratings and written reviews you leave or receive after a completed, paid introduction
- reports you submit about an opportunity, a member or a rating, and the outcome of Kunn's review
- records that contact details were detected and removed from a restricted field, including the type of detail detected and the surface it appeared on, but never the detected value itself
- in-app notifications
- communications with the Kunn team
- conversion declarations, settlement and transaction activity
Transaction and billing information
Payment-card information is processed by our payment provider. Kunn does not receive or store full payment-card numbers or card security codes, and does not store bank-account credentials.
We may retain transaction records and identifiers needed to operate the platform, including:
- payment-provider customer, checkout and payment identifiers
- connected payout account identifiers and payout readiness status
- referral fees and agreed offer amounts
- Kunn platform fees
- settlement amounts and settlement status
- refunds and disputes, where applicable
- invoice and receipt information
- Kunn Gold billing status and renewal information, where a member has purchased Gold
Technical and security information
We may collect technical information such as:
- IP address
- browser and user-agent information
- timestamps
- authentication and session information
- security and audit activity
- server and request logs
- platform error information
This information is used to operate the platform and to support security, fraud prevention, troubleshooting, auditing and dispute handling.
3.Information about clients provided by members
A central part of Kunn is that a member may provide personal information about a client or another individual when submitting a referral opportunity. That information is processed so that Kunn can verify the opportunity, seek the client's consent, facilitate an introduction to a suitable business, and administer the resulting transaction.
Members must have appropriate authority to provide that information to Kunn for the purpose of managing the referral and facilitating an introduction to another business.
Before submitting client information, the posting process requires the member to confirm:
"I confirm that I am authorised to provide this client's information to Kunn for the purpose of referring this opportunity and facilitating an introduction to another business."
Kunn records this declaration against the specific opportunity, including the wording shown to the member and when it was confirmed, so that there is an auditable record of the authority relied on.
Members must not submit:
- scraped contact information
- purchased contact lists
- personal information they are not authorised to disclose
- entire CRM databases
- unrelated or unnecessary personal information
The member's authority declaration and Kunn's later consent and contact-release process are separate stages. The declaration records the member's confirmation of their own authority. It does not mean that Kunn has independently contacted the client.
5.Client consent and protected handover
Kunn asks the client to approve the introduction before their contact details are released. Kunn may send the client a secure, single-use approval request explaining who the introduction would be to. The client's decision, the wording shown to them and the time of their response are recorded. In some cases, consent may instead be confirmed by an authorised Kunn administrator following its internal process. Members cannot record or confirm client consent themselves.
Client contact information is released to the selected business only after all of the following:
- the opportunity has been verified to the extent Kunn requires;
- the client's consent to the introduction and release has been confirmed;
- a business has been selected and assigned to the opportunity, and
- the required referral fee together with the Kunn platform fee has been successfully paid.
If the client declines, does not respond, or the approval request expires, Kunn does not release the protected contact information through that opportunity.
Kunn keeps a record of each authorised release, including which business received the information and when. Once the handover has occurred, the business and the client may communicate directly, and the business is responsible for handling that information in accordance with the privacy and marketing laws that apply to it, and only for the purpose of the referred opportunity.
6.Why Kunn uses personal information
We use personal information to:
- create and manage accounts
- verify members and businesses
- assess market and account-type eligibility, including United Arab Emirates business eligibility
- operate the Kunn marketplace
- post and manage referral opportunities
- show relevant opportunities to eligible businesses
- manage applications and offers
- manage client authority and consent processes
- facilitate authorised introductions and handovers
- process payments for referral fees and Kunn platform fees
- manage settlements and payouts
- administer optional Kunn Gold billing
- issue transaction records, invoices and receipts
- provide support to members
- send authentication and service communications
- provide in-app notifications
- prevent misuse, fraud, circumvention and unauthorised access
- maintain security and audit records
- investigate disputes
- comply with applicable legal obligations
- improve and administer the platform
Kunn does not use personal information for targeted advertising.
7.Verification documents
Identity and business verification may require supporting documentation, such as government-issued identity documents or business registration documents.
These documents are held in access-controlled private storage, and access is restricted to authorised Kunn administrative processes.
Kunn intends to retain verification information only for as long as reasonably required for verification, platform integrity, dispute management and applicable legal or operational requirements. There is no automated deletion schedule for verification documents at this time.
8.United Arab Emirates business eligibility information
Marketplace participation in the United Arab Emirates is limited to eligible Business accounts that satisfy Kunn's UAE business-eligibility process. To assess eligibility, Kunn may collect basic business and licence information, such as legal business name, licensing authority or free zone, trade licence number, licence expiry date and related business registry details, together with the name and role of the person submitting it.
For this eligibility process Kunn does not collect passports, Emirates ID documents, bank-account information or KYC/KYB verification documents.
Where payment or payout onboarding is required, our payment provider may independently collect identity, business, banking and verification information under its own processes. Kunn eligibility and payment-provider onboarding are separate.
9.Payments, Stripe and payout onboarding
Kunn uses third-party payment infrastructure, currently Stripe, for payment processing and for connected-account and payout onboarding.
When you pay through Kunn, or when you set up an account to receive payouts, certain information is provided directly to and processed by the payment provider. That may include card details, identity information, business details, banking details and any verification documents the provider requires under its own identity and compliance processes. That handling is subject to the payment provider's own terms and privacy practices.
Kunn itself does not store full card numbers, card security codes, bank-account credentials, passports or the identity documents the payment provider collects for its own verification. Kunn retains transaction-level records and identifiers so that it can operate settlements, issue records and handle disputes. These include customer, payment and connected-account references, amounts, statuses, invoices and receipts.
10.Service providers
Kunn uses a small number of technology providers to operate the platform. The current providers are:
Supabase and Lovable Cloud. Database, authentication and file storage infrastructure.
Lovable. Hosting, deployment and integration infrastructure.
Stripe. Payment processing for referral settlements and optional Kunn Gold billing, and connected-account and payout onboarding.
Twilio. Phone verification and OTP SMS delivery, and delivery of client approval requests where a client is sent a secure approval link by SMS.
Google. Authentication, where a member chooses to sign in with Google.
Service providers receive only the information reasonably required for the services they provide, subject to their own processing arrangements and the agreements that apply to their services.
11.Overseas storage and processing
Kunn's current backend database and file-storage infrastructure is hosted in the AWS and Supabase ap-northeast-1 region in Tokyo, Japan. Personal information held in the platform database and in document storage is therefore stored outside Australia, the United States and the United Arab Emirates.
Some of the technology providers we use operate globally, and personal information may be stored, processed or accessed in other countries. This may include infrastructure operated by Supabase, Lovable, Stripe, Twilio and, where Google sign-in is used, Google. Where the countries involved can reasonably be identified, we disclose them in this Policy.
We take reasonable steps in relation to the overseas handling of personal information, including selecting established providers and limiting the information they receive to what is reasonably required.
12.Communications
Kunn currently sends:
- authentication emails, such as account confirmation and password reset
- SMS messages for phone verification
- SMS approval requests sent to a client, where Kunn asks the client to approve an introduction before their contact details are released
- in-app transactional notifications about opportunities, applications, offers, consent, handovers and settlements
- matching-opportunity alerts to members who have purchased Kunn Gold
Kunn does not currently send marketing emails or marketing SMS. If we introduce marketing communications in future, we will provide appropriate consent and unsubscribe or opt-out mechanisms where required.
14.Security
We use technical and organisational measures intended to protect personal information. These include account authentication, role-based access controls, restricted database permissions, private document storage, controlled and payment-gated disclosure of client contact information, audit logging, server-side permission checks, and payment processing through an established payment provider.
No online system can guarantee absolute security. We work to reduce risk and to respond appropriately if an issue arises, but we cannot promise that information will never be accessed or disclosed in a way that is not permitted by this Policy.
15.Retention
We retain personal information for as long as reasonably necessary for:
- providing the platform
- maintaining opportunity, consent, handover and transaction records
- verification and eligibility
- security and fraud prevention
- dispute handling
- legal and accounting requirements
- other legitimate operational requirements
There is no automated deletion schedule at this time. Cancelling optional Kunn Gold does not close your account, and closing your account does not automatically delete the opportunity, consent, handover, settlement and transaction records associated with it.
Information may be deleted or de-identified when it is no longer reasonably required, subject to legitimate legal, security, accounting, dispute and record-keeping requirements.
16.Access, correction and deletion requests
You can contact us about the personal information we hold about you. We can help with requests for access, correction and deletion, and with general privacy questions.
Send your request to info@kunngroup.com.
Deletion requests are currently handled manually by the Kunn team. There is no self-service account deletion feature at this stage.
We may need to retain certain information where it is reasonably required for legal obligations, transaction records, fraud prevention, security, dispute handling or other legitimate purposes.
17.Client privacy requests
If you believe your information has been submitted to Kunn by a member as part of a referral opportunity, you can contact us to ask what information we hold, request a correction, raise a concern, or request deletion where appropriate.
Email info@kunngroup.com and let us know as much detail as you can about the business that referred you and the nature of the enquiry.
We may need to verify your identity before we act on a request.
Please do not send identity documents by ordinary email unless Kunn specifically asks you to provide them through an appropriate process.
18.Data breaches
We assess suspected privacy or security incidents and take action that is appropriate to the circumstances, consistent with applicable requirements.
Where the Australian Notifiable Data Breaches scheme applies and notification is required, we will take the notification steps required of us, and we will comply with any other notification obligations that apply to us. Not every security incident will require notification, and each incident is assessed on its facts.
19.Privacy complaints
If you have a privacy concern or complaint, email info@kunngroup.com. We will review the matter and respond within a reasonable period.
Where applicable, you may also have the right to contact the Office of the Australian Information Commissioner, or the privacy or data-protection authority in your own jurisdiction where one applies to you.
20.Changes to this Policy
We may update this Privacy Policy from time to time, for example when:
- the platform changes
- our service providers change
- processing locations change
- our markets change
- legal requirements change
- new functionality is introduced
The current version always shows its effective and last updated date at the top of the page.
21.Contact
Privacy enquiries
KUNN Group
Australia
Email: info@kunngroup.com