Cordiio Privacy Policy

Welcome to Cordiio, a Caribbean Carnival, culture, entertainment, travel, discovery and social networking platform operated by PostFyi Inc. (“PostFyi,” “Cordiio,” “we,” “us,” or “our”).

Cordiio enables users to discover and share Caribbean and Carnival culture, connect with other users, follow creators and entertainers, upload and interact with content, discover events, businesses, restaurants, accommodations and experiences, and participate in the wider Cordiio community.

This Privacy Policy explains how PostFyi Inc. collects, uses, stores, shares and protects personal information when you access or use Cordiio, including our website, applications, features, content, communications and related services (collectively, the “Services”).

This Policy also explains the privacy choices and rights available to you.

By using Cordiio, you acknowledge that your personal information will be handled as described in this Privacy Policy.

Cordiio is operated by:

PostFyi Inc., Barbados. Email: info@postfyi.com

For purposes of applicable data protection laws, including where applicable the EU General Data Protection Regulation (“EU GDPR”) and UK General Data Protection Regulation (“UK GDPR”), PostFyi Inc. generally acts as the data controller for personal information collected through Cordiio.

This means PostFyi Inc. determines why and how personal information is processed through the platform.

The information we collect depends on how you use Cordiio.

3.1 Account and Profile Information

When you register for or maintain a Cordiio account, we may collect information such as:

• Full name;
• Username;
• Email address;
• Password authentication information;
• Profile photograph or avatar;
• Biography or profile description;
• Country or region;
• Account preferences;
• Interests;
• Links to websites or social media profiles;
• Creator, entertainer or business information;
• Account creation date;
• Account status; and
• Other information you voluntarily add to your profile.

Passwords are processed through secure authentication systems and are not intended to be stored by us in readable plain-text form.

Cordiio is a social platform. Users may create, upload, publish, share and interact with content.

User-generated content may include personal information depending on what you choose to upload or disclose.

4.1 Fuh-Reel

Fuh-Reel allows users to upload and share short-form video clips, generally up to 30 seconds in length.

When you use Fuh-Reel, we may process:

• Uploaded videos;
• Video captions;
• Descriptions;
• Hashtags;
• Usernames and profile information associated with a video;
• Upload date and time;
• Engagement information;
• Comments;
• Likes or other reactions;
• Shares;
• Reports;
• Technical information associated with uploaded media; and
• Other information voluntarily included in the content.

Videos may contain images, voices, likenesses, locations or other information relating to you or other individuals.

You are responsible for considering the privacy of others before uploading content containing other identifiable individuals.

4.2 Captr

Captr allows users to upload and share images and visual moments relating to Carnival, Caribbean culture, travel, events and other experiences.

When you use Captr, we may process:

• Photographs and images;
• Captions and descriptions;
• Hashtags;
• Associated profile information;
• Comments;
• Likes or reactions;
• Shares;
• Reports;
• Upload information; and
• Other information voluntarily included with the post.

Uploaded photographs may contain identifiable individuals or information about locations and events.

4.3 Comments and Social Interactions

When you interact with other users or content, we may collect and process information concerning:

• Comments;
• Replies;
• Likes and reactions;
• Follows and followers;
• Shares;
• Saved content;
• Saved events;
• Saved businesses;
• Content reports;
• Account reports;
• Other community interactions; and
• Where available, notifications associated with those interactions.

These activities may be associated with your Cordiio account.

Cordiio is designed in part around public discovery and social interaction.

Depending on the feature and your account settings, information you publish may be visible to other Cordiio users and, in some cases, people who are not signed into Cordiio.

Public information may include:

• Username;
• Profile photograph;
• Biography;
• Fuh-Reels;
• Captr posts;
• Comments;
• Public profile information;
• Entertainer profiles;
• Event listings;
• Business listings;
• Likes, reactions or engagement information;
• Public follower/following information; and
• Other information you choose to make publicly available.

You should therefore avoid publishing information that you do not want other people to see.

Content that is publicly accessible may potentially be copied, shared, downloaded, screenshotted or otherwise redistributed by other people outside Cordiio. PostFyi Inc. cannot control copies made independently by third parties after information has been publicly disclosed.

When you submit, claim or manage an event on Cordiio, we may collect:

• Event name;
• Description;
• Date and time;
• Venue;
• Location;
• Country;
• Event category;
• Organizer or promoter information;
• Contact information;
• Ticket links;
• Websites;
• Social media links;
• Event imagery;
• Pricing information; and
• Other information supplied as part of the listing.

Information intended to advertise an event will generally be publicly displayed.

When you create, claim or manage a business, attraction, restaurant, accommodation or other destination listing, we may collect:

• Business or destination name;
• Description;
• Category;
• Country;
• Address or location;
• Email address;
• Telephone number;
• Operating hours;
• Website;
• Reservation or booking links;
• Social media links;
• Photographs;
• Amenities or services;
• Pricing or other business information; and
• Information about the person managing or submitting the listing.

Information submitted for the purpose of promoting a business or destination will generally be publicly displayed.

If you create, submit or manage an entertainer, artist, DJ, creator or similar profile, we may collect:

• Professional or stage name;
• Biography;
• Genre;
• Country;
• Entertainer type;
• Profile photographs;
• Booking information;
• Email address;
• Telephone number;
• Website;
• Instagram;
• Facebook;
• X;
• TikTok;
• Spotify;
• Apple Music;
• Other social or streaming links; and
• Information used to verify or administer the profile.

Information intended for public promotion will generally be publicly accessible.

When you use Cordiio, we may automatically collect information concerning your interaction with the Services.

This may include:

• Pages or screens viewed;
• Content viewed;
• Searches;
• Events viewed or saved;
• Businesses viewed or saved;
• Fuh-Reels viewed or interacted with;
• Captr posts viewed or interacted with;
• Accounts followed;
• Likes and reactions;
• Comments;
• Clicks;
• Session information;
• Referral information;
• Notification preferences;
• Date and time of activity;
• Approximate engagement duration; and
• Other interactions with platform features.

We may use this information to operate the Services, understand how features are used, improve Cordiio and, where implemented, personalize content and recommendations.

When you access Cordiio, certain technical information may be collected automatically, including:

• Internet Protocol (IP) address;
• Browser type;
• Device type;
• Operating system;
• Language;
• Device identifiers where applicable;
• Login timestamps;
• Session information;
• Referring pages or websites;
• Error and diagnostic information;
• Security logs; and
• Other technical information necessary to operate and secure the Services.

IP addresses may provide an approximate geographic location such as a country, region or city.

Cordiio is designed around Caribbean events, destinations and experiences.

We may process:

• A country or location you voluntarily add to your profile;
• Locations associated with events, businesses or content;
• Approximate location derived from technical information such as an IP address; and
• Location information you voluntarily include in posts, captions, listings or other content.

If Cordiio introduces features that request access to precise device location, we will request appropriate device permission where required.

You can control device-level location permissions through your browser or device settings where applicable.

Content uploaded to Cordiio may contain information about other individuals.

For example, a Fuh-Reel or Captr post may contain photographs or videos of friends, performers, event attendees or members of the public.

Users should respect the privacy, publicity and other legal rights of individuals appearing in their content and should obtain permission where required by applicable law.

If you believe content on Cordiio violates your privacy rights, you may contact us at info@postfyi.com or use available reporting features.

We may use personal information to:

• Create and administer Cordiio accounts;
• Authenticate users;
• Maintain user profiles;
• Provide social networking features;
• Publish Fuh-Reels and Captr posts;
• Enable comments, likes, reactions, follows, sharing and other interactions;
• Display events, businesses, destinations and entertainer profiles;
• Allow users to save events, businesses and other content;
• Personalize aspects of the Cordiio experience;
• Recommend or organize relevant content where such features are provided;
• Send notifications;
• Process and manage submissions;
• Communicate with users;
• Provide customer support;
• Verify accounts, entertainers or businesses;
• Detect spam, fraud, abuse or suspicious activity;
• Enforce our Terms, policies and Community Guidelines;
• Review reports and moderate content;
• Protect users, PostFyi Inc. and the Cordiio community;
• Maintain platform security;
• Diagnose technical problems;
• Improve our website, products and features;
• Conduct analytics;
• Understand platform usage;
• Develop new features;
• Send service-related and transactional communications;
• Send marketing communications where permitted;
• Comply with applicable laws and lawful requests; and
• Establish, exercise or defend legal claims.

Where the EU GDPR or UK GDPR applies, we process personal information only where we have an appropriate legal basis.

Depending on the processing activity, our legal bases may include:

Performance of a Contract

We process information when necessary to provide Cordiio and its features to you, including:

• Creating your account;
• Maintaining your profile;
• Publishing content you request us to publish;
• Providing Fuh-Reel and Captr;
• Enabling follows, comments and other social interactions;
• Managing saved content; and
• Providing other requested platform functionality.

Legitimate Interests

We may process information where necessary for our legitimate interests or those of another party, provided those interests are not overridden by your rights and interests.

These interests may include:

• Protecting Cordiio from fraud and abuse;
• Maintaining security;
• Moderating content;
• Improving our Services;
• Understanding platform performance;
• Providing customer support;
• Protecting our legal rights; and
• Operating and developing our business.

Where required, we assess whether our interests are appropriately balanced against the privacy rights of users.

Consent

We may rely on your consent for certain activities where legally required, such as:

• Certain non-essential cookies or tracking technologies;
• Certain marketing communications;
• Device permissions; or
• Other optional processing that legally requires consent.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Legal Obligation

We may process information where necessary to comply with applicable laws, regulations, court orders or other legal obligations.

Vital Interests

In exceptional circumstances, we may process information where necessary to protect the life or physical safety of an individual.

Cordiio may review, restrict, remove or preserve content and account information where reasonably necessary to:

• Investigate reports;
• Enforce our Terms and Community Guidelines;
• Detect fraud or spam;
• Prevent abuse;
• Protect platform security;
• Protect users;
• Respond to intellectual property complaints;
• Respond to privacy complaints;
• Comply with legal requirements; or
• Protect the rights and interests of PostFyi Inc. or others.

Moderation may involve reviewing content, associated account information and relevant activity.

Where automated systems are used to assist with spam detection, recommendations, safety or moderation, we may process relevant usage and content signals for those purposes.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals unless permitted by applicable law and appropriate safeguards are provided.

Cordiio may use information about your activity to organize or personalize your experience.

For example, signals may include:

• Content you view;
• Accounts you follow;
• Events you save;
• Businesses you save;
• Content you like or interact with;
• Searches;
• Country or regional preferences; and
• Other interactions with Cordiio.

These signals may be used to recommend or prioritize relevant events, entertainers, businesses, destinations, Fuh-Reels, Captr posts or other content.

Where legally required, users will be provided appropriate controls or information regarding such processing.

Cordiio may use cookies, local storage and similar technologies to:

• Keep users signed in;
• Maintain authentication sessions;
• Remember preferences;
• Protect accounts;
• Prevent fraud;
• Maintain security;
• Remember interface settings;
• Measure platform performance; and
• Understand how the Services are used.

Some technologies are strictly necessary for Cordiio to function.

If we use non-essential analytics, advertising or similar tracking technologies requiring consent under applicable law, users in applicable jurisdictions will be provided with appropriate notice and consent controls.

Our use of cookies and similar technologies may be further explained in a separate Cookie Policy or consent interface.

Cordiio may display promoted events, businesses, entertainers, destinations, sponsored content or other advertisements.

If Cordiio introduces personalized advertising or third-party advertising technologies, we will update this Privacy Policy and provide any consent or opt-out mechanisms required by applicable law.

We do not sell personal information merely because businesses or advertisers purchase advertising space on Cordiio.

We do not sell your personal information as part of our ordinary operation of Cordiio.

We may disclose information in the following circumstances.

Other Users and the Public

Information you choose to publish publicly may be accessible to other Cordiio users or members of the public.

Service Providers

We may use third-party companies to help us operate Cordiio, including providers of:

• Cloud hosting;
• Data storage;
• Content delivery;
• Authentication;
• Database services;
• Email delivery;
• Analytics;
• Security;
• Content moderation;
• Customer support;
• Media processing;
• Video or image storage; and
• Other technical infrastructure.

These providers may process personal information on our behalf to provide their services.

Where required by applicable law, we enter into appropriate contractual and data-protection arrangements with service providers.

Legal Requirements

We may disclose information when we reasonably believe disclosure is necessary to:

• Comply with applicable law;
• Respond to a valid legal request;
• Respond to a court order;
• Protect the safety of an individual;
• Investigate fraud or unlawful activity;
• Enforce our agreements; or
• Protect the rights or property of PostFyi Inc., Cordiio, our users or others.

Corporate Transactions

If PostFyi Inc. or Cordiio is involved in a merger, acquisition, financing, restructuring, sale of assets or similar business transaction, information may be disclosed or transferred as part of that transaction, subject to applicable law.

Cordiio may contain links to external services, including:

• Ticketing platforms;
• Booking websites;
• Hotels;
• Restaurants;
• Event organizers;
• Businesses;
• Spotify;
• Apple Music;
• Instagram;
• TikTok;
• Facebook;
• X;
• Other social networks; and
• Other third-party websites or services.

When you leave Cordiio or interact directly with a third-party service, that service’s own terms and privacy policy apply.

PostFyi Inc. is not responsible for the privacy practices of independent third-party websites or services.

We use reasonable administrative, organizational and technical measures designed to protect personal information against unauthorized access, disclosure, alteration, loss or destruction.

Measures may include:

• Secure authentication;
• Access controls;
• Database security policies;
• Encryption where appropriate;
• Security monitoring;
• Restricted administrative access; and
• Other industry-standard security practices.

Where our database technology supports row-level security or similar access controls, such controls may be used to limit unauthorized access to account data.

However, no internet service, transmission method or storage system can be guaranteed to be completely secure.

Users are responsible for maintaining the confidentiality of their account credentials and should notify us if they believe their account has been compromised.

PostFyi Inc. is based in Barbados, while Cordiio may be accessed by users around the world.

Your personal information may therefore be processed or stored in Barbados, the United States, the United Kingdom, countries within or outside the European Economic Area, or other jurisdictions where our service providers maintain infrastructure.

Privacy laws in those countries may differ from those in your country of residence.

Where the EU GDPR, UK GDPR or another applicable privacy law restricts international transfers of personal information, we will use a legally recognized transfer mechanism or safeguard where required.

Depending on the circumstances, these mechanisms may include:

• An adequacy decision;
• European Commission Standard Contractual Clauses;
• The UK International Data Transfer Agreement;
• The UK Addendum to approved EU Standard Contractual Clauses; or
• Another legally recognized transfer mechanism or exception.

We may also undertake applicable transfer assessments where required.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing Cordiio, satisfying legal obligations, resolving disputes, enforcing agreements and maintaining platform security.

Retention periods may vary depending on the type of information.

For example:

• Account information may generally be retained while your account remains active;
• Public posts may remain available until deleted by you, removed by us or your account is deleted, subject to applicable retention requirements;
• Security and technical logs may be retained for a limited period appropriate to security and operational needs;
• Records relating to legal disputes, abuse reports or regulatory obligations may be retained for longer where reasonably necessary.

Deletion from active systems may not result in immediate deletion from secure backups. Backup copies may remain until they are overwritten or deleted according to normal backup retention cycles.

We may retain information in anonymized or aggregated form where it can no longer reasonably identify you.

Where platform functionality permits, users may delete individual Fuh-Reels, Captr posts or other content through their accounts.

Users may also request deletion of their Cordiio account.

When an account is deleted, we will take reasonable steps to delete or anonymize associated personal information, subject to:

• Legal retention obligations;
• Fraud or security requirements;
• Dispute resolution;
• Enforcement of agreements;
• Legitimate legal claims;
• Backup retention; and
• Information that must reasonably be maintained to protect other users or the platform.

Some information may remain visible where another user’s content independently references you or where another user has legitimately reshared or reproduced public information outside Cordiio.

Depending on where you live and the laws applicable to you, you may have rights concerning your personal information.

These may include the right to:

• Request access to your personal information;
• Receive a copy of certain personal information;
• Correct inaccurate or incomplete information;
• Request deletion of personal information;
• Request restriction of processing;
• Object to certain processing;
• Object to direct marketing;
• Request data portability;
• Withdraw consent where processing is based on consent;
• Request information about how your information is processed; and
• Lodge a complaint with an applicable data protection authority.

These rights are not absolute and may be subject to legal limitations or exceptions.

To exercise applicable privacy rights, contact: info@postfyi.com

We may need to verify your identity before completing certain requests.

We will respond within the time required by applicable law.

If you are located in the European Economic Area and the EU GDPR applies to our processing, you may have rights under the GDPR including access, rectification, erasure, restriction, portability, objection and withdrawal of consent.

You also have the right to lodge a complaint with the data protection supervisory authority in your country.

Where required by applicable law, PostFyi Inc. will provide information regarding any applicable EU representative or Data Protection Officer.

If you are located in the United Kingdom and the UK GDPR applies to our processing, you may have rights including access, rectification, erasure, restriction, portability, objection and withdrawal of consent.

You may also have the right to complain to the UK Information Commissioner’s Office (ICO).

Where UK law requires PostFyi Inc. to appoint a UK representative, the applicable representative’s information will be made available through this Privacy Policy or another appropriate privacy notice.

We may send communications relating to:

• Account registration;
• Login and authentication;
• Password resets;
• Account security;
• Comments or social activity;
• Follows;
• Event submissions;
• Business listings;
• Entertainer profiles;
• Verification;
• Content moderation;
• Reports;
• Changes to our Services;
• Important policy updates; and
• Other transactional matters.

Where permitted, we may also send promotional or marketing communications.

You may unsubscribe from non-essential marketing emails through the unsubscribe mechanism provided in those messages or through available account settings.

You may continue receiving essential service, security or transactional communications even after opting out of marketing.

Cordiio is not directed to children under 13 years of age, and users under 13 are not permitted to create an account.

We do not knowingly collect personal information from children under 13.

If we learn that an account belongs to a child under the minimum permitted age, we may suspend or delete the account and take reasonable steps to remove associated personal information.

Parents or guardians who believe that a child has provided personal information to Cordiio contrary to this Policy may contact: info@postfyi.com

Different countries may impose higher minimum ages or additional parental-consent requirements for certain processing activities. Where applicable law requires a higher age or parental authorization, we will apply the legally required standard.

Because Cordiio may include content relating to public festivals and Carnival events where children may be present, users should exercise particular care when uploading identifiable images or videos of minors.

Users should avoid publicly posting highly sensitive personal information through Cordiio.

Depending on applicable law, sensitive information may include information concerning:

• Health;
• Race or ethnicity;
• Religious beliefs;
• Political opinions;
• Sexual orientation;
• Biometric identifiers;
• Precise location;
• Government identification numbers; or
• Other legally protected categories.

Cordiio does not require users to publicly disclose such information as part of ordinary social posting.

If you voluntarily include sensitive information in publicly accessible content, other users may be able to view that information.

Users may report content or activity they believe violates their privacy or the privacy of another person.

Reports may relate to matters such as:

• Unauthorized disclosure of personal information;
• Images or videos uploaded without appropriate authorization;
• Impersonation;
• Harassment;
• Exposure of sensitive information;
• Content involving minors;
• Account compromise; or
• Other privacy concerns.

Reports may be reviewed by Cordiio/PostFyi Inc. and appropriate action may be taken under our Terms, Community Guidelines and applicable law.

If we become aware of a personal data breach, we will investigate and respond as reasonably appropriate.

Where applicable law requires notification to a data protection authority or affected individuals, we will provide such notification in accordance with applicable legal requirements.

Businesses, event organizers, entertainers and other professional users should avoid publishing private personal contact information unless they intend for that information to be publicly accessible.

Contact details included in public listings may be viewed and used by members of the public.

Where you provide personal information concerning another individual on behalf of a business, organization or entertainer, you represent that you have appropriate authority or another lawful basis to provide that information.

Some information displayed on Cordiio may originate from businesses, event organizers, entertainers, public sources or third-party submissions.

If you believe personal information about you has been displayed inaccurately or without appropriate authority, contact us and we will review the request.

We aim to collect and process only information reasonably necessary to provide, secure and improve Cordiio.

As Cordiio develops new social, discovery, recommendation, communication and media features, we will consider privacy and data-protection requirements as part of the development process.

Where appropriate, privacy settings and controls may be provided to users to manage how information is displayed or used.

Cordiio and its features will continue to evolve.

We may update this Privacy Policy periodically to reflect:

• New platform features;
• Changes in how information is processed;
• New service providers;
• Changes in applicable law;
• Security developments; or
• Changes to our business practices.

When we make changes, we will update the “Last Updated” date at the top of this Policy.

If changes materially affect how we process personal information, we may provide additional notice through Cordiio, email, account notifications or another appropriate method.

Questions, concerns, complaints or requests relating to this Privacy Policy or the processing of personal information may be directed to:

PostFyi Inc., Operator of Cordiio, Barbados

Privacy Contact: info@postfyi.com

When contacting us about a privacy request, please provide enough information for us to identify your account and understand your request. Do not send passwords or unnecessary sensitive information by email.

This Privacy Policy should be read together with Cordiio’s:

• Terms and Conditions;
• Community Guidelines;
• Cookie Policy, where applicable;
• Content and Copyright policies;
• Music Submission terms, where applicable; and
• Other policies or notices presented when using specific Cordiio features.

Together, these policies establish the rules and privacy framework governing use of the Cordiio platform.