Privacy Policy

Overview

Kapurv ("Kapurv", "we", "us", or "our") operates an AI-powered social media management platform accessible at kapurv.com. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our platform and services (collectively, the "Services").

We are committed to protecting your privacy and handling your data in a transparent and responsible manner. By using the Services, you consent to the data practices described in this policy.

Data We Collect

Information You Provide Directly

• Account Information: Name, email address, and password when you register. If you sign in with Google, we receive your name, email, and profile photo from Google.
• Brand Profile Data: Brand name, website URL, social media handles, brand voice descriptions, target audience details, color palettes, and any other information you input when setting up a Brand in Kapurv.
• Content You Create: Posts, captions, images, campaign briefs, and other content you generate, upload, or save within the platform.
• AI Prompts & Queries: The prompts and requests you submit to our AI features, including research queries and content generation instructions.
• Support Communications: Messages, emails, or requests you send to our support team.
• Organisation & Team Data: Organisation name, team member email addresses, and role assignments if you use our multi-user features.
• Payment Information: We process payments through our payment partners. We do not directly store your payment card details; payment data is handled by PCI-compliant third-party processors.

Information We Collect Automatically

• Usage Data: Features used, pages visited, AI credits consumed, actions performed, and interactions within the platform.
• Log Data: IP address, browser type and version, operating system, date and time of requests, and error logs.
• Device Information: Device type, screen resolution, and other technical device attributes relevant to rendering the platform correctly.
• Session Data: Authentication tokens, session duration, and login timestamps for security and performance purposes.

How We Use Your Data

We use the data we collect for the following purposes:

We will not use your data for purposes other than those stated above without first obtaining your consent.

AI Features & Your Data

This section specifically addresses how data is handled when you use our AI-powered features, given the unique nature of AI processing.

What Data is Sent to AI Models

When you use an AI feature (e.g., content generation, AI research, campaign planning), we send the following to third-party AI model providers:

• Your explicit prompt or query (the instruction you type).
• Relevant brand context you have configured (e.g., brand name, tone of voice, target audience, brand colors).
• Any reference content or images you provide for the specific request.

We do not send your payment information, passwords, or organisational admin PINs to AI model providers.

Third-Party AI Providers

We use the following AI service providers. Your data is subject to their respective data-handling policies when sent to them for processing:

• Google Gemini API: Used for text generation, research, and campaign planning. Governed by Google's Privacy Policy.
• Replicate API: Used for AI image generation features. Governed by Replicate's Privacy Policy.

We strongly recommend reviewing the privacy policies of our AI providers to understand how they handle data sent through their APIs.

No AI Training on Your Data

Kapurv does not use your personal data, brand content, prompts, or AI outputs to train or fine-tune any proprietary AI model. Our AI providers may have their own policies about API data and model training; please refer to their published policies.

Automated Decision-Making

All AI-generated content (posts, images, research, plans) is provided as suggestions for human review. No automated decision is made about you personally based solely on AI outputs. You have full control over what content you use or publish. We do not use AI to make decisions about your account eligibility, pricing, or access without human oversight.

Data Sharing & Disclosure

We Do Not Sell Your Data

We do not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Period.

When We Share Your Data

We share your data only in the following limited circumstances:

• Service Providers: We share data with trusted third parties who help us deliver the Services — including Firebase (infrastructure), Google (AI & auth), Replicate (AI image generation), and payment processors. These providers are contractually bound to use your data only to provide services to us and not for their own purposes.
• Within Your Organisation: If you belong to an Organisation on Kapurv, other members of that Organisation may have access to shared brand workspaces, content, and collaboration features, as configured by your Organisation Administrator.
• Legal Requirements: We may disclose your information if required to do so by law, regulation, or valid legal process (e.g., a court order or government request).
• Safety & Security: We may disclose data to protect the rights, property, or safety of Kapurv, our users, or others, particularly in cases of potential fraud, security incidents, or threats of harm.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of Kapurv's assets, your data may be transferred to the successor entity. We will notify you of any such transfer and the applicable privacy choices.

Cookies & Tracking

How We Use Cookies

Kapurv uses a minimal set of cookies and local storage mechanisms to operate the platform. We do not use advertising or cross-site tracking cookies.

We do not use Google Analytics, Facebook Pixel, or other third-party advertising trackers. If in the future we add any analytics tools, we will update this policy.

Controlling Cookies

You can control and delete cookies through your browser settings. However, disabling strictly necessary cookies will prevent you from using authenticated features of the platform, as we rely on these to keep you securely logged in.

Data Storage & Security

Where Your Data Is Stored

Your data is stored using Google Firebase infrastructure, which operates globally with data centres compliant with international security standards (SOC 2, ISO 27001). Data may be stored and processed in regions including Asia (India / Singapore) and the United States, depending on Firebase's infrastructure routing and our configuration.

Security Measures

We implement industry-standard security measures to protect your data, including:

• All data transmitted between your browser and our servers is encrypted using TLS/HTTPS.
• Data stored in Firebase Firestore and Firebase Storage is encrypted at rest.
• Access to production systems is restricted to authorised personnel only.
• API keys and service credentials are stored as server-side environment variables, not exposed in client-side code.
• Firebase Security Rules enforce strict access controls so users can only access their own data.

Security Incident Response

In the unlikely event of a data breach that affects your personal data, we will notify you within 72 hours of becoming aware of the breach, in accordance with applicable data protection laws. Our notification will include the nature of the breach, the data involved, and the steps we are taking to remediate it.

Despite our best efforts, no security system is impenetrable. We cannot guarantee the absolute security of your data, and we encourage you to use a strong, unique password and keep your credentials confidential.

Your Rights

Depending on your location, you may have certain rights related to your personal data. We respect and will honour these rights:

How to Exercise Your Rights

To exercise any of these rights, please contact our privacy team at support@kapurv.com. We will respond to verified requests within 30 days. We may need to verify your identity before processing requests.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you the Services. When your account is closed or deleted, we will:

• Delete your brand content, AI-generated outputs, and calendar data within 30 days of account closure.
• Retain billing and transaction records for 7 years as required by financial and tax regulations.
• Retain anonymized, aggregated usage statistics indefinitely for analytical purposes, as these cannot be linked back to you.
• Retain support correspondence for 2 years for legal and audit purposes.

You may request early deletion of your data at any time, subject to our legal obligations to retain certain records.

Children's Privacy

Kapurv is designed for adults and businesses. Our Services are not directed to children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe that a person under the age of 18 has created an account on our platform, please contact us at support@kapurv.com and we will promptly investigate and take steps to delete the account and any associated data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the nature of our Services. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification email to all registered users at least 14 days before the changes take effect.
• For significant changes that require your consent, present the updated policy for your explicit review and acceptance upon your next login.

We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have questions, requests, or concerns regarding this Privacy Policy or how we handle your data, please get in touch:

We aim to respond to all privacy requests within 30 days. For urgent matters, please include "URGENT" in your email subject line.