Kuro

Privacy Policy

Last updated May 20, 2026

This Privacy Policy describes how Zou Productions (“we”, “us”, “our”) collects, uses, and protects information through the Kuro platform (“the Service”). This policy applies to all users of the Service, including production companies (“Customers”) and their independent contractors (“Contractors”).

1Information We Collect

1.1Information Provided by Customers

When Customers register and use the Service, we collect:

  • Account information: name, email address, password.
  • Contractor directory information: contractor names, phone numbers, email addresses, locations, and job roles as entered by the Customer.
  • Twilio account credentials: Account SID, Auth Token, and phone number, stored encrypted. These are used solely to send SMS on the Customer’s behalf.
  • Outreach configuration: scheduling preferences, reminder settings.

1.2Information Provided by Contractors

When Contractors respond to availability requests, we collect:

  • Availability data: day-by-day availability status (available, on hold, unavailable) for the requested date range.
  • Scheduling notes: optional free-text notes submitted with availability responses.

1.3Information Collected Automatically

When anyone accesses the Service, we may automatically collect:

  • Device and browser information: browser type, operating system, screen resolution.
  • Usage data: pages viewed, features used, timestamps of interactions.
  • IP address: used for security and fraud prevention.

We do not use cookies for advertising or tracking. Any cookies used are strictly necessary for the operation of the Service (authentication, session management).

2How We Use Information

We use the information we collect to:

  • Provide and operate the Service, including sending SMS messages on behalf of Customers to their Contractors via the Customer’s own Twilio account.
  • Authenticate Customer accounts and secure access.
  • Display availability data to authorized Customer users.
  • Send automated reminders to Contractors who have not responded to availability requests.
  • Improve and maintain the Service.
  • Communicate with Customers about their account, service updates, and changes to these policies.
  • Comply with legal obligations.

We do not use contractor phone numbers, availability data, or personal information for marketing, advertising, or any purpose unrelated to the availability management functionality of the Service.

3How We Share Information

We do not sell personal information to third parties. We share information only in the following circumstances:

3.1Service Providers

We use the following third-party services to operate the platform:

ProviderPurposeData shared
SupabaseDatabase hosting and authenticationAll Customer and Contractor data stored in the database
TwilioSMS delivery (via Customer’s own account)Contractor phone numbers, message content
VercelWeb hostingIP addresses, usage data via server logs

Each provider is bound by their own privacy policies and data processing agreements. We select providers that maintain appropriate security standards.

3.2At Customer Direction

Contractor availability data and contact information are accessible to authorized users within the Customer’s organization. Customers control who on their team has access to the Service.

3.3Legal Requirements

We may disclose information if required by law, legal process, or government request, or to protect the rights, property, or safety of our users or the public.

4SMS Messaging

4.1Consent

Customers are responsible for obtaining consent from their Contractors before adding them to the outreach list. By submitting a Contractor’s phone number to the Service, the Customer represents that they have obtained the Contractor’s consent to receive text messages related to scheduling and availability.

4.2Message Types

The Service sends the following types of text messages to Contractors:

  • Availability requests: a message with a link to the availability form, sent on the Customer’s configured schedule.
  • Reminders: follow-up messages to Contractors who have not responded, limited to the Customer’s configured maximum.

All messages are sent from the Customer’s own Twilio phone number. Zou Productions is not the sender of record.

4.3Opting Out

Contractors may stop receiving text messages at any time by:

  • Replying STOP to any message received from the Service.
  • Contacting the Customer (the production company) directly and requesting removal from the outreach list.

When a Contractor opts out, their phone number is flagged and no further messages are sent unless the Customer re-obtains consent and re-adds them.

4.4Message Frequency

Contractors receive a maximum of one availability request plus up to three reminders per outreach period, as configured by the Customer.

5Data Retention

  • Availability data: retained for as long as the Customer’s account is active. Customers may request deletion of historical data at any time.
  • Contractor contact information: retained for as long as the Customer’s account is active or until the Customer removes the Contractor from their directory.
  • Account data: retained for 30 days after account termination, then permanently deleted.
  • Twilio credentials: deleted immediately upon account termination or when the Customer removes them from settings.
  • Automatically collected data (IP addresses, usage logs): retained for up to 90 days, then deleted or anonymized.

6Data Security

We implement reasonable technical and organizational measures to protect the information we collect, including:

  • Encryption of data in transit (TLS/HTTPS).
  • Encryption of data at rest in our database.
  • Encryption of stored Twilio credentials.
  • Access controls limiting who can view Customer and Contractor data.
  • Permanent personal links for Contractor form access (no persistent credentials or passwords).

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

7Your Rights

7.1For Customers

You may:

7.2For Contractors

You may:

  • Opt out of text messages at any time (see Section 4.3).
  • Request access to the availability data we hold about you by contacting the Customer (the production company) you work with, or by contacting us directly at zouproductionsteam@gmail.com.
  • Request deletion of your data by contacting us at zouproductionsteam@gmail.com. Note that your data is managed by the Customer; we will coordinate with them to fulfill your request.

7.3California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to request deletion, and the right not to be discriminated against for exercising your rights. We do not sell personal information. To exercise your rights, contact us at zouproductionsteam@gmail.com.

8Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

9International Users

The Service is operated in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer and processing.

10Changes to This Policy

We may update this Privacy Policy from time to time. We will notify Customers of material changes via email or through the Service at least 14 days before the changes take effect. The “last updated” date at the top of this page reflects the most recent revision.

11Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at:

Zou Productions

zouproductionsteam@gmail.com

San Bruno, CA