New: Kwamle AI Studio is live — build intelligent chatbots in minutes.Discover →
Legal

Privacy Policy

Your privacy matters to us. This document explains what data we collect, how we use it, and who we share it with — with full transparency.

Last updated: June 12, 2026

1. Overview

Kwamle Media ("we", "Kwamle", "the platform") operates an AI-powered social-media marketing automation service at kwamlemedia.com and app.kwamlemedia.com. This policy explains our practices for collecting and processing personal data, in compliance with GDPR (EU), CCPA (California), and Middle East data protection regulations.

By using the platform you agree to the practices described here. If you disagree, please discontinue use of the service.

2. Data we collect

Account information

  • Name, email, phone number, and company name at sign-up.
  • Your public Facebook ID when you log in with Facebook.
  • IP address, browser type, and operating system.

Facebook & Instagram data

  • Access tokens used to manage your Pages on your behalf.
  • Messenger messages, comments, and posts you ask us to automate.
  • Subscriber data and customer profiles you choose to import.

Usage data

  • Activity logs, AI calls, automation events, and login history.
  • Aggregated performance metrics for the campaigns you run.

Payment information

All payments are processed by Stripe and PayPal. We never see or store your full card number — only a token reference and the last 4 digits.

3. How we use your data

  • Provide the service, including bots, automations, scheduling, AI replies, and the in-chat store.
  • Send service notifications (security alerts, billing, important updates).
  • Improve our product through aggregated, anonymized analytics.
  • Comply with legal obligations and prevent abuse or fraud.
  • Provide priority technical support when you reach out.
  • Marketing communications: only with your explicit opt-in, and you can unsubscribe at any time.

4. Sharing with third parties

We do not sell your data. We share it only with:

  • Meta (Facebook/Instagram): to manage your Pages via the Graph API.
  • AI providers (OpenAI, Google, Anthropic, Groq, DeepSeek): for AI features, using your own API keys.
  • Stripe & PayPal: to process payments securely.
  • Cloud providers (AWS, DigitalOcean): for hosting and storage.
  • Authorized government bodies, only when legally required by court order.

All our partners are bound by a Data Processing Agreement (DPA) with us.

5. Cookies

We use cookies for the following purposes:

  • Essential: login sessions, CSRF tokens, language and theme preferences.
  • Analytics: Google Analytics, Plausible (anonymized statistics).
  • Functional: remembering your in-product choices (timezone, dashboard layout).

You can disable cookies in your browser settings, but some features may stop working.

6. Security

  • TLS 1.3 encryption for all connections.
  • AES-256 encryption for databases at rest.
  • Hardware Security Modules (HSM) for sensitive access tokens.
  • Principle of Least Privilege for user permissions.
  • Daily backups retained for 30 days.
  • 24/7 monitoring with automated alerts for suspicious activity.

7. Data retention

  • Account data: as long as your account is active + 90 days after deletion.
  • Message logs: 12 months by default (configurable in your settings).
  • AI usage logs: 6 months for technical and accounting purposes.
  • Invoices and payments: 7 years (legal accounting requirement).

8. Your legal rights

You are entitled, at any time, to:

  • Access — request a copy of the data we hold about you.
  • Correction — fix inaccurate or incomplete information.
  • Deletion (the right to be forgotten).
  • Data portability — export your data in a machine-readable format.
  • Restriction — limit how we use your data.
  • Object to certain processing of your data.

We respond within 30 days maximum. To exercise any of these rights, send an email to privacy@kwamlemedia.com.

9. Children's privacy

Our service is not directed at children under 13. If you become aware of personal data collected from a child without parental consent, please notify us so we can delete it.

10. Policy updates

We may update this policy from time to time. We will announce major changes by email or via a prominent banner on the platform. Continued use after the changes take effect constitutes acceptance.

11. Contact us

For any privacy inquiry:

Ready to start?

Try Kwamle Media free for 7 days — no credit card required.