Privacy Policy — Kukpo Social
Last updated: September 8, 2026
Kukpo Social ("the Service") is operated by Kukpo Holdings LLC, 4041 Wilshire Blvd, Los Angeles, CA 90010. This policy explains what we collect when you use the Service to create and publish social media content for your business, and how we handle it.
1. Information we collect
- Account information — your name, email address, password (stored hashed by our authentication provider), company/workspace name, and preferred language.
- Brand information you enter — business descriptions, contact details, locations, staff names, tone guidelines and similar profile data used to generate content.
- Connected social accounts — when you connect a Facebook Page, Instagram professional account, Threads account or YouTube channel, we store the account name, ID, profile picture and the OAuth access/refresh tokens the platform issues, so the Service can publish posts, read comments and read performance metrics on your behalf. We only request the permissions needed for those features.
- Content — drafts, images, videos, captions, comments and replies you create or that are retrieved from your connected accounts.
- Usage and technical data — log entries (e.g. when a post was published or failed), counts of generated items for plan limits, browser type and IP address in server logs.
2. How we use information
To provide the Service: generate content with AI, schedule and publish to your connected accounts, show comments/messages and let you reply, display performance insights, enforce plan limits, provide support and keep the Service secure. We do not sell personal information and we do not use your content or connected-account data for advertising.
3. AI processing
Brand information and topics you enter are sent to third-party AI providers (Anthropic for text, Google Gemini for images, and optional video providers) to generate content. These providers process the data to return results and, under our agreements, do not use it to train their models. Website text you ask us to read for auto-fill is fetched and processed the same way.
4. Platform data (Meta, Google/YouTube)
Data received from Meta (Facebook, Instagram, Threads) and Google (YouTube) APIs is used only to provide the features you enable, is stored only as long as your account stays connected, and is never shared with third parties except the sub-processors below. Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
5. Sub-processors
Supabase (database, authentication, file storage), Vercel (hosting), Anthropic and Google (AI generation), Meta and Google (publishing APIs). Each processes data only on our instructions.
6. Retention and deletion
Connected-account tokens are deleted immediately when you disconnect the account in the app or remove the app from your Facebook/Instagram/Google settings. Workspace data is deleted within 30 days of a deletion request. See our data deletion page for the steps.
7. Your rights
You can access, correct, export or delete your data at any time from Settings or by emailing privacy@kukpoholdings.com. California residents have the rights described in the CCPA/CPRA; we do not sell or share personal information for cross-context behavioral advertising.
8. Security
Data is encrypted in transit (TLS) and at rest. Access tokens are stored server-side only and never exposed to the browser. Each company's data is isolated by row-level security.
9. Children
The Service is for businesses and is not directed to children under 13.
10. Changes and contact
We will post updates here and notify workspace owners of material changes. Questions: privacy@kukpoholdings.com, Kukpo Holdings LLC, 4041 Wilshire Blvd, Los Angeles, CA 90010.