Skip to content
Legal

Privacy Policy

Last updated:

At Kavio, your privacy matters. This Policy explains what data we collect, why we collect it, and how you can control it.

1. Information We Collect

Account information

Name, email address, and password when you register. If you sign in via Google or another OAuth provider, we collect the profile information they share with us.

Social media credentials

OAuth access tokens for the social platforms you connect (Facebook, Instagram, X, LinkedIn, TikTok, YouTube, Pinterest, Threads, Mastodon, Bluesky). These tokens are stored with AES-256 encryption and are used exclusively to publish content on your behalf.

Content data

Posts, captions, images, videos, and scheduling data you create within Kavio. You own this content — we only store it to deliver the service.

Usage data

Pages visited, features used, actions taken, browser type, device type, IP address, and timestamps. Used to improve the product and detect abuse.

Payment data

Billing information is processed securely by our payment provider. We do not store full card numbers — only the last four digits and expiration date for display purposes.

2. How We Use Your Information

  • Provide, operate, and improve the Service
  • Publish content to your connected social platforms at the times you schedule
  • Send transactional emails (account verification, password reset, billing receipts)
  • Send product update and marketing emails — you may unsubscribe at any time
  • Analyze usage patterns to prioritize product improvements
  • Detect, investigate, and prevent fraud or abuse
  • Comply with legal obligations

3. Data Storage and Security

Your data is stored on servers in secure, SOC 2-compliant data centers. We use:

  • AES-256 encryption for all stored credentials and tokens
  • TLS 1.3 for all data in transit
  • Role-based access controls — only necessary team members can access production data
  • Regular security audits and penetration testing

4. Data Sharing

We do not sell your personal data. We share data only in these limited circumstances:

  • Social platforms: solely to publish content you schedule through Kavio
  • Service providers: hosting, payment processing, email delivery — bound by strict data processing agreements
  • Legal requirements: when required by law, court order, or to protect our rights and the safety of others
  • Business transfer: in the event of a merger or acquisition, your data may be transferred as part of the business assets

5. Cookies & Tracking

We use:

  • Essential cookies: session management and authentication — required for the Service to function
  • Preference cookies: remember your settings (language, timezone, UI preferences)
  • Analytics: aggregate, anonymized usage data to understand how the product is used

You can disable non-essential cookies in your browser settings. Disabling essential cookies will prevent you from using the Service.

6. Your Rights

Depending on your location, you may have the following rights under GDPR, CCPA, or other applicable privacy laws:

  • Access: request a copy of the personal data we hold about you
  • Correction: request correction of inaccurate data
  • Deletion: request deletion of your personal data ("right to be forgotten")
  • Portability: receive your data in a structured, machine-readable format
  • Objection: object to or restrict certain processing
  • Withdraw consent: where processing is based on consent

To exercise any of these rights, email us at hello@getkavio.app. We respond within 30 days.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account:

  • Your personal data is deleted within 30 days
  • Backups are purged within 90 days
  • Aggregated, anonymized analytics data (which cannot identify you) may be retained indefinitely
  • Data required for legal or financial compliance may be retained longer as required by law

8. Children's Privacy

The Service is not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from minors. If we become aware of such collection, we will delete that data immediately. If you believe a minor has provided us their data, contact us at hello@getkavio.app.

9. International Transfers

If you are accessing Kavio from outside the country where our servers are located, your data may be transferred internationally. We ensure such transfers comply with applicable data protection laws through appropriate safeguards (Standard Contractual Clauses, adequacy decisions, etc.).

10. Changes to This Policy

We may update this Privacy Policy periodically. For material changes, we will notify you via email or in-app notification at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects when it was last revised.

11. Contact

For privacy-related questions, data requests, or to report a concern, contact us at hello@getkavio.app.

Also available in Tiếng Việt