Privacy policy
Last updated: July 29, 2026
1. Who we are
KOTSU (kotsu.shop) is published by Rahimi Anis, sole trader, 173 rue de Courcelles, 75017 Paris, France (SIREN 980 419 956). For anything data-related, write to contact@kotsu.shop.
2. What we collect
Makers: email, password (hashed by our authentication provider), studio profile, billing status. Clients: the name, email, project details, measurements and reference files submitted with a commission request, plus messages and approvals on the tracking page. Followers: the email left to be notified of a maker's reopening. Technical logs necessary to run the service.
3. What we use it for
Running the service: showing maker pages, routing requests, powering tracking pages and transactional emails (confirmations, milestones, payment reminders, review invitations, reopening alerts). Billing maker subscriptions through Stripe. We do not sell personal data and we do not run advertising.
4. Measurements and reference sheets
Measurements and reference files are sensitive to our users and are treated as private: stored in private storage, accessible only to the maker of the commission and the client holding the tracking link, never shown publicly and never used for anything but the commission.
5. Where data lives
Data is hosted on Supabase (database, authentication, file storage) and the application is served from our hosting provider. Subscription payments are processed by Stripe; KOTSU never sees card numbers. Transactional email is delivered by Resend.
6. How long we keep it
Commission records (requests, milestones, payments, messages) are kept while the maker's account exists, because they are the proof trail both parties rely on. Follower emails are kept until the follower unsubscribes or the maker's account is deleted. Account deletion removes personal data within 30 days, except what French law requires us to keep (billing records).
7. Your rights
Under the GDPR you can ask for access, rectification, deletion, portability, and restriction of your data, whether you are a maker, a client or a follower. Write to contact@kotsu.shop; we answer within 30 days. You can also complain to the CNIL (cnil.fr).
8. Cookies
KOTSU uses only technical cookies: the session cookie that keeps makers signed in, and the theme preference. No advertising trackers, no third-party analytics cookies.