Common questions.

The Schedule of Terms in force when you join is fixed for twelve months from that date, unless your signed order says otherwise. Public pricing may change later; your charter rate does not change during that window.

Yes. Tier changes take effect from the next billing period. Before any downgrade, we review with you what your workspace currently uses so nothing your engagements depend on is switched off by surprise.

No. Subscription pays for software. Managed-service fees pay for human implementation work. Commission applies only where Kalinklo represents the artist directly. We do not add a generic tax to every engagement a workspace records.

Organization and Agency OS plans are billed monthly under the terms you accept. Provider checkout is used only where it is configured and proven for the workspace; otherwise the office arranges payment manually. Artist Pro, when available post-charter, is monthly. Enterprise agreements can set a different cadence in writing.

Reviewed-access workspaces are not charged until a subscription, managed-service package, or representation agreement is explicitly accepted. We do not silently turn on paid billing after a pilot.

PUBLIC — search-indexed folio anyone can find. PRIVATE_LISTING (new default for represented artists) — visible inside the platform to verified presenters and partner agencies, not SEO-indexed. STEALTH — visible only to the artist's agency workspace and explicitly-invited presenters. WORKSPACE_PRIVATE — engagements never leave the workspace; profile invisible to every directory surface.

PRIVATE_LISTING — matching the market norm (Askonas Holt, IMG Artists, Intermusica) where rosters aren't publicly listed by default. You can change to PUBLIC any time from /dashboard/artist/profile.

Yes — if they're signed in and verified. /api/request-hold accepts holds against PUBLIC and PRIVATE_LISTING artists. STEALTH and WORKSPACE_PRIVATE artists are addressable only through workspace-internal flows with explicit ownership checks.

Only if your visibility is PUBLIC. PRIVATE_LISTING, STEALTH, and WORKSPACE_PRIVATE all 404 on the anonymous /artists/[slug] page and stay out of the sitemap.

The platform applies a default three-tier policy (>90 days / 30–90 days / <30 days from the engagement date) unless your Contract overrides it. See the cancellation policy guide in the help centre for the full sequence and force-majeure handling.

Disputes route through /admin/disputes with the platform owning the audit trail. Each dispute carries a stage (intake → review → resolution → close-out), an assigned admin, and a written resolution. Resolutions can be refunds, write-offs, partial settlements, or mediation outcomes — all logged.

Core subprocessors include Neon (Postgres), Vercel (hosting + Blob storage), Resend (email), payment-provider integrations where configured, and Sentry (optional error monitoring). Engagement settlement is recorded manually during the founding period. Each provider is scoped on /security under Subprocessors; the full integration table is at /integrations.

Life of the workspace + 7 years after closure (tax/legal). Documents in the vault: as long as the workspace exists, owner can delete on demand. Auth events: 12 months. Health probes: no PII, retained at platform's discretion.

Yes. /dashboard/reports surfaces 20+ CSV exports across requests, bookings, quotes, contracts, invoices, settlements, collections, disputes, roster, and activity. Each export is tenant-scoped server-side. CAN_EXPORT_REPORTS entitlement required.

Not yet, and we won't say otherwise. Kalinklo is designed for procurement readiness: the controls those audits examine — audit logging, tenant isolation, gated documents, MFA, defined retention — are live today and documented on /security. SOC 2 Type I is in preparation; SOC 2 Type II and ISO 27001 are planned.

Yes. The DPA template is downloadable right now from /api/security/dpa — no request needed. To execute a countersigned copy for your organization, write to security@kalinklo.com.

Yes. The Trust Center & procurement packet — security practices, the subprocessor list, data retention windows, and the certification roadmap in one document — is downloadable from /api/security/trust-packet.

Send it to security@kalinklo.com. Completed questionnaires come back with current control evidence; the same address handles DPA countersignatures and vulnerability reports, on the response timeline published on /security.

Your workspace owns its data — export at any time from /dashboard/reports. Engagement records are retained for the life of the workspace plus 7 years after closure (tax/legal); vault documents can be deleted by the owner on demand. The full retention table is on /security.

No. Kalinklo is operating infrastructure underneath the work — production access, member portal, roster, requests, holds, contracts, invoices, approvals, and records. We respect existing representation agreements; requests for represented artists route through the agency.

No. We charge software subscriptions and managed-service fees. Commission applies only where Kalinklo represents an artist directly. Full pricing is published on /pricing.

You do. Export at any plan via /dashboard/reports. We do not sell or share contact data, and we never custody payment funds without a contract that says so.

Cancellations, disputes, and refunds touch human decisions — the platform records the audit trail, you (or your counsel) decide the outcome. Money moves only on explicit, approved action.