1. Information We Collect
We collect the following information to provide the Service:
- Account information: name, email address, profile picture (via Google OAuth)
- Usage data: service usage patterns, types and quantities of generated content
- Device information: browser type, IP address, device identifiers
- Payment information: processed through our payment processor; we do not store full payment details
- Product analytics data: page views, clicks, feature usage, performance metrics (via PostHog)
- Session recordings: screen interactions with sensitive inputs automatically masked (via PostHog Session Replay)
2. How We Use Information
Collected information is used for the following purposes:
- Providing and maintaining the Service
- Improving user experience and developing the Service
- Providing customer support
- Complying with legal obligations
3. Information Sharing
We do not share personal information with third parties except in the following cases:
- Third-party service providers necessary for the Service: AI model providers (OpenAI, Anthropic), payment processor (Lemon Squeezy), product analytics (PostHog Inc.), hosting (Railway, Vercel)
- Legal requirements or law enforcement requests
- With your explicit consent
4. Data Security
We apply industry-standard security measures to protect personal information. However, no method of data transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security.
5. Your Rights
You have the following rights regarding your personal information:
- Right to access and view personal information
- Right to request correction and deletion of personal information
- Right to object to processing of personal information
- Right to data portability
6. Cookies & Analytics
We use cookies and similar technologies to provide the Service and understand usage. Authentication cookies are essential. Analytics cookies (via PostHog) track page views, clicks, and feature usage to improve the Service. We also record session replays with sensitive inputs (passwords, payment fields) automatically masked. You may opt out of analytics by blocking third-party cookies in your browser or using browser-level Do-Not-Track signals.
7. Contact
For privacy-related inquiries, please contact us at contact@kreplo.com.
8. Instagram & Meta Platform Data
When you connect your Instagram account, we access your Instagram Business account information and content publishing permissions through the Meta Platform. Access tokens are stored in encrypted form. You can disconnect your Instagram account at any time from the Platforms page. If you remove the app from your Facebook/Instagram settings, your data is automatically deleted via Meta's Data Deletion Callback.
- Data collected: Instagram Business account ID, username, display name, encrypted access token
- Data processors: Railway (hosting), PostgreSQL database
- Data deletion: Processed automatically upon disconnection or app removal from Facebook/Instagram settings
- Data retention: Deleted immediately upon disconnection or Meta callback