New: Kwamle AI Studio is live — build intelligent chatbots in minutes.Discover →
Legal

Privacy Policy

Your privacy matters to us. This document explains what data we collect, how we use it, and who we share it with — with full transparency.

Last updated: June 12, 2026

1. Overview

Kwamle Media ("we", "Kwamle", "the platform") operates an AI-powered social-media marketing automation service at kwamlemedia.com and app.kwamlemedia.com. This policy explains our practices for collecting and processing personal data, in compliance with GDPR (EU), CCPA (California), and Middle East data protection regulations.

By using the platform you agree to the practices described here. If you disagree, please discontinue use of the service.

2. Data we collect

Account information

  • Name, email, phone number, and company name at sign-up.
  • Your public Facebook ID when you log in with Facebook.
  • IP address, browser type, and operating system.

Facebook & Instagram data

  • Access tokens used to manage your Pages on your behalf.
  • Messenger messages, comments, and posts you ask us to automate.
  • Subscriber data and customer profiles you choose to import.

Usage data

  • Activity logs, AI calls, automation events, and login history.
  • Aggregated performance metrics for the campaigns you run.

Payment information

All payments are processed by Stripe and PayPal. We never see or store your full card number — only a token reference and the last 4 digits.

3. How we use your data

  • Provide the service, including bots, automations, scheduling, AI replies, and the in-chat store.
  • Send service notifications (security alerts, billing, important updates).
  • Improve our product through aggregated, anonymized analytics.
  • Comply with legal obligations and prevent abuse or fraud.
  • Provide priority technical support when you reach out.
  • Marketing communications: only with your explicit opt-in, and you can unsubscribe at any time.

4. Sharing with third parties

We do not sell your data. We share it only with:

  • Meta (Facebook/Instagram): to manage your Pages via the Graph API.
  • AI providers (OpenAI, Google, Anthropic, Groq, DeepSeek): for AI features, using your own API keys.
  • Stripe & PayPal: to process payments securely.
  • Cloud providers (AWS, DigitalOcean): for hosting and storage.
  • Authorized government bodies, only when legally required by court order.

All our partners are bound by a Data Processing Agreement (DPA) with us.

5. Cookies

We use cookies for the following purposes:

  • Essential: login sessions, CSRF tokens, language and theme preferences.
  • Analytics: Google Analytics, Plausible (anonymized statistics).
  • Functional: remembering your in-product choices (timezone, dashboard layout).

You can disable cookies in your browser settings, but some features may stop working.

6. Security

  • TLS 1.3 encryption for all connections.
  • AES-256 encryption for databases at rest.
  • Hardware Security Modules (HSM) for sensitive access tokens.
  • Principle of Least Privilege for user permissions.
  • Daily backups retained for 30 days.
  • 24/7 monitoring with automated alerts for suspicious activity.

7. Data retention

  • Account data: as long as your account is active + 90 days after deletion.
  • Message logs: 12 months by default (configurable in your settings).
  • AI usage logs: 6 months for technical and accounting purposes.
  • Invoices and payments: 7 years (legal accounting requirement).

8. Your legal rights

You are entitled, at any time, to:

  • Access — request a copy of the data we hold about you.
  • Correction — fix inaccurate or incomplete information.
  • Deletion (the right to be forgotten).
  • Data portability — export your data in a machine-readable format.
  • Restriction — limit how we use your data.
  • Object to certain processing of your data.

We respond within 30 days maximum. To exercise any of these rights, send an email to privacy@kwamlemedia.com.

9. Children's privacy

Our service is not directed at children under 13. If you become aware of personal data collected from a child without parental consent, please notify us so we can delete it.

10. Policy updates

We may update this policy from time to time. We will announce major changes by email or via a prominent banner on the platform. Continued use after the changes take effect constitutes acceptance.

11. Contact us

For any privacy inquiry:

12. YouTube API Services

Kwamle Media uses YouTube API Services to provide its YouTube scheduling and publishing features. By connecting a YouTube channel to your Kwamle Media account, you are agreeing to be bound by the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy.

When you connect a YouTube channel we access and store, on our secured servers: your channel's identifier, title, thumbnail and public statistics; metadata of the videos and playlists you manage through the platform; and the OAuth tokens Google issues for your authorization. We use this data solely to provide the features you configure — scheduling and uploading your videos, posting the first comment you define, assigning videos to your playlists, and showing your channel's status inside your dashboard. We do not sell this data, do not use it for advertising, and do not share it with third parties except as described in section 4.

Stored YouTube API data is refreshed or deleted at least every 30 days. When you disconnect a channel from your dashboard, or delete your account, the stored tokens and cached YouTube data for that channel are deleted from our systems within 7 days. You can also revoke Kwamle Media's access at any time from your Google security settings.

For any question about our use of YouTube API data, contact privacy@kwamlemedia.com.

13. TikTok

Kwamle Media uses TikTok's Login Kit and Content Posting API so that you can connect your own TikTok account and publish videos and photo posts to it from your dashboard. By connecting a TikTok account you agree to the TikTok Terms of Service; TikTok's handling of your information is described in the TikTok Privacy Policy.

When you connect a TikTok account we store, encrypted on our secured servers: your TikTok open ID, display name, username, avatar and public statistics; the list of your public videos with their public metrics; and the access tokens TikTok issues for your authorization. We use this data solely to show the connected account, to publish the posts you create or schedule with the privacy level and settings you choose, and to display the performance of your public videos inside your dashboard. Media files you upload for a post remain on our servers only until TikTok has received them and are deleted automatically within 2 days. We do not sell this data, do not use it for advertising, and do not share it with third parties except as described in section 4.

Cached TikTok data is refreshed periodically; statistics snapshots are kept for 90 days and activity logs for 30 days. When you disconnect the account from your dashboard, or delete your Kwamle Media account, we revoke the access token at TikTok and delete the stored tokens and cached data. You can also remove Kwamle Media's access at any time from TikTok → Settings and privacy → Security → Manage app permissions. For any question about our use of TikTok data, contact privacy@kwamlemedia.com.

Ready to start?

Try Kwamle Media free for 7 days — no credit card required.