1. Overview
Kwamle Media ("we", "Kwamle", "the platform") operates an AI-powered social-media marketing automation service at kwamlemedia.com and app.kwamlemedia.com. This policy explains our practices for collecting and processing personal data, in compliance with GDPR (EU), CCPA (California), and Middle East data protection regulations.
By using the platform you agree to the practices described here. If you disagree, please discontinue use of the service.
2. Data we collect
Account information
- Name, email, phone number, and company name at sign-up.
- Your public Facebook ID when you log in with Facebook.
- IP address, browser type, and operating system.
Facebook & Instagram data
- Access tokens used to manage your Pages on your behalf.
- Messenger messages, comments, and posts you ask us to automate.
- Subscriber data and customer profiles you choose to import.
Usage data
- Activity logs, AI calls, automation events, and login history.
- Aggregated performance metrics for the campaigns you run.
Payment information
All payments are processed by Stripe and PayPal. We never see or store your full card number — only a token reference and the last 4 digits.
3. How we use your data
- Provide the service, including bots, automations, scheduling, AI replies, and the in-chat store.
- Send service notifications (security alerts, billing, important updates).
- Improve our product through aggregated, anonymized analytics.
- Comply with legal obligations and prevent abuse or fraud.
- Provide priority technical support when you reach out.
- Marketing communications: only with your explicit opt-in, and you can unsubscribe at any time.
6. Security
- TLS 1.3 encryption for all connections.
- Encryption for databases at rest.
- Hardware Security Modules (HSM) for sensitive access tokens.
- Principle of Least Privilege for user permissions.
- Regular backups, kept for a limited period.
- 24/7 monitoring with automated alerts for suspicious activity.
7. Data retention
- Account data: as long as your account is active + 90 days after deletion.
- Message logs: 12 months by default (configurable in your settings).
- AI usage logs: 6 months for technical and accounting purposes.
- Invoices and payments: 7 years (legal accounting requirement).
8. Your legal rights
You are entitled, at any time, to:
- Access — request a copy of the data we hold about you.
- Correction — fix inaccurate or incomplete information.
- Deletion (the right to be forgotten).
- Data portability — export your data in a machine-readable format.
- Restriction — limit how we use your data.
- Object to certain processing of your data.
We respond within 30 days maximum. To exercise any of these rights, send an email to privacy@kwamlemedia.com.
9. Children's privacy
Our service is not directed at children under 13. If you become aware of personal data collected from a child without parental consent, please notify us so we can delete it.
10. Policy updates
We may update this policy from time to time. We will announce major changes by email or via a prominent banner on the platform. Continued use after the changes take effect constitutes acceptance.
11. YouTube API Services
Kwamle Media uses YouTube API Services to provide its YouTube scheduling and publishing features. By connecting a YouTube channel to your Kwamle Media account, you are agreeing to be bound by the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy.
When you connect a YouTube channel we access and store, on our secured servers: your channel's identifier, title, thumbnail and public statistics; metadata of the videos and playlists you manage through the platform; and the OAuth tokens Google issues for your authorization. We use this data solely to provide the features you configure — scheduling and uploading your videos, posting the first comment you define, assigning videos to your playlists, and showing your channel's status inside your dashboard. We do not sell this data, do not use it for advertising, and do not share it with third parties except as described in section 4.
Stored YouTube API data is refreshed or deleted at least every 30 days. When you disconnect a channel from your dashboard, or delete your account, the stored tokens and cached YouTube data for that channel are deleted from our systems within 7 days. You can also revoke Kwamle Media's access at any time from your Google security settings.
For any question about our use of YouTube API data, contact privacy@kwamlemedia.com.
12. TikTok
Kwamle Media uses TikTok's Login Kit and Content Posting API so that you can connect your own TikTok account and publish videos and photo posts to it from your dashboard. By connecting a TikTok account you agree to the TikTok Terms of Service; TikTok's handling of your information is described in the TikTok Privacy Policy.
When you connect a TikTok account we store, encrypted on our secured servers: your TikTok open ID, display name, username, avatar and public statistics; the list of your public videos with their public metrics; and the access tokens TikTok issues for your authorization. We use this data solely to show the connected account, to publish the posts you create or schedule with the privacy level and settings you choose, and to display the performance of your public videos inside your dashboard. Media files you upload for a post remain on our servers only until TikTok has received them and are deleted automatically within 2 days. We do not sell this data, do not use it for advertising, and do not share it with third parties except as described in section 4.
Cached TikTok data is refreshed periodically; statistics snapshots are kept for 90 days and activity logs for 30 days. When you disconnect the account from your dashboard, or delete your Kwamle Media account, we revoke the access token at TikTok and delete the stored tokens and cached data. You can also remove Kwamle Media's access at any time from TikTok → Settings and privacy → Security → Manage app permissions. For any question about our use of TikTok data, contact privacy@kwamlemedia.com.
13. WhatsApp Business Platform
Kwamle Media uses the WhatsApp Business Platform (Cloud API) provided by Meta in two ways: to talk with our own customers on our official WhatsApp number, and to let you connect your own WhatsApp Business number and manage its conversations from your dashboard. By connecting a number you agree to the WhatsApp Business Terms of Service and the WhatsApp Business Messaging Policy. Messages sent through the platform are carried and processed by Meta as described in the WhatsApp Privacy Policy.
When you connect a number we store on our secured servers: your WhatsApp Business Account ID, the phone number ID, the display number and name, the number's status and quality rating, and the access token Meta issues for it, encrypted. For each conversation we store the person's phone number and WhatsApp profile name, the text and captions of the messages, the media files sent from your dashboard, delivery and read receipts with their times, and the labels you add. We use this data solely to send, receive and show your messages in your inbox, and to run the automatic replies and broadcasts you set up yourself. When you turn on AI replies, the text of an incoming message is sent to the AI provider that writes the reply (see section 4). We do not sell this data and do not use it for advertising.
The business that connects its number decides which conversations it holds with its customers and is responsible for having their permission before messaging them, as WhatsApp's policies require; we process those messages on its behalf. If you messaged a business that uses Kwamle Media, you can stop its messages at any time by blocking it in WhatsApp, and you can ask that business, or us, to delete your conversation.
You can delete any conversation and its messages from your inbox at any time. When you unlink a number we delete its access token immediately and stop sending and receiving on it. You can also remove Kwamle Media's access from your Meta business settings. To ask us to delete the WhatsApp data we hold, contact privacy@kwamlemedia.com.
14. The Kwamle Media Android app
The Kwamle Media app for Android is another way to use your existing Kwamle Media account. Everything in this policy applies to it. In addition:
- What the app sends to us: your email and password when you sign in (the password is only checked; the app does not store it); a random device identifier that the app creates on first launch; your phone's model, Android version, app version and language, so you can see and sign out your devices; and a notification token, so we can tell you about new messages and posts. We also record the IP address of each device's last request, for security. Every sign-in from the app is also recorded in your account's sign-in history (time, IP address and device type), for security.
- What you send through the app: replies to your customers, the photos and videos you choose, captions, and your decisions on comments. They go to the channels you connected (for example Facebook, Instagram or WhatsApp) only when you ask the app to send or publish them, exactly as on the website.
- Suggested replies and captions: when you ask for a suggested reply or a suggested caption, the text of the conversation or of your post is sent to an artificial intelligence provider, which writes the suggestion. Nothing is sent to your customer or published until you review it and tap send or publish.
- Photos and videos: the app only reads the files you pick in Android's photo picker or share to it. It does not ask for access to your whole gallery.
- Fingerprint lock (optional): Android checks your fingerprint or screen lock on your phone. The app only learns whether the phone was unlocked; it never receives or stores your fingerprint.
- Copies on your phone: to work on a weak connection, the app keeps your recent conversations, messages waiting to be sent, your upcoming posts and a short summary for the home-screen widget in its private storage on your phone. Your sign-in token is kept in Android's encrypted storage. Signing out deletes these copies from the phone.
- Notifications: a notification about a new message shows the sender's name and the beginning of the message. We send notifications through Google Firebase Cloud Messaging, which works as our service provider. You can turn them off at any time in Android's settings.
- No ads and no tracking: the app contains no advertising, analytics or tracking tools, and does not use the advertising ID.
- Devices: a device that has not been used for 60 days is signed out automatically, and you can sign out any device yourself from the app or the website. Notification delivery records are kept for 7 days and failed sign-in records for 1 day.
- Deleting your account: request it in the app (Settings → Delete account) or on the web, without the app, on our account deletion page. Once you confirm, all your app devices are signed out at once, and your account and its data are deleted as described in this policy. Encrypted backups are erased automatically over time. You can also delete your account yourself from your Profile on the website.
- The app is intended for adults (18 and over) who manage business channels.
15. Contact us
For any privacy inquiry:
Ready to start?
Try Kwamle Media free for 7 days — no credit card required.