Privacy Policy
Effective date: June 9, 2026 · Last updated: June 9, 2026
Kreyato AI ("we", "us", or "our") operates the Kreyato AI platform — an AI-powered content creation and repurposing service. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services. By using Kreyato AI, you agree to the practices described in this policy.
1. Information We Collect
Account Information
When you register, we collect your full name, email address, and a hashed password. If you sign in via OAuth (Google, LinkedIn, or Facebook), we receive your name, email, and profile picture from those providers.
Content You Provide
We store the briefs, topics, keywords, and instructions you submit to generate content, along with the AI-generated outputs (posts, captions, tags, images) produced on your behalf. This is necessary to display your project history and enable repurposing features.
Connected Social Accounts
If you connect a Facebook Page, LinkedIn profile, or Instagram Business account, we store the OAuth access tokens and basic account identifiers (page IDs, account names) needed to publish content on your behalf.
Usage Data
We automatically collect information about how you use the platform, including pages visited, features used, content generation requests, credit consumption, and error events. This data is used to improve the service.
Technical Data
We collect IP addresses, browser type, device type, operating system, and referral URLs for security monitoring, fraud prevention, and analytics.
2. How We Use Your Information
- •Provide, operate, and maintain the Kreyato AI platform and all its features
- •Generate AI content by passing your briefs and instructions to third-party AI models
- •Publish content to connected social media accounts at your direction
- •Manage your account, credits, and subscription
- •Send transactional emails (account confirmation, password reset, usage alerts)
- •Detect and prevent fraud, abuse, and security incidents
- •Analyse usage patterns to improve platform performance and features
- •Comply with legal obligations
3. AI Processing & Third-Party Models
Kreyato AI uses large language models (LLMs) and image generation APIs to produce content. Your inputs (briefs, topics, instructions) are transmitted to these services as part of the generation pipeline:
We do not use your content to train AI models. We do not sell your content to third parties. Inputs sent to AI providers are governed by their respective data processing agreements, which generally prohibit training on API inputs unless you explicitly opt in.
5. Data Sharing & Disclosure
We do not sell your personal data. We share data only in the following circumstances:
- •AI providers: Your content inputs are sent to OpenAI and Anthropic to generate outputs.
- •Infrastructure providers: We use cloud hosting, database, object storage, and CDN services. These providers process data only as necessary to provide the infrastructure.
- •Legal requirements: We may disclose data when required by law, court order, or to protect the rights, property, or safety of Kreyato AI, its users, or the public.
- •Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
6. Data Retention
We retain your account information and content for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or needed to resolve disputes.
Generated content stored in projects is retained until you delete it or close your account. Access tokens for connected social accounts are deleted immediately when you disconnect the account.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- •Access: Request a copy of the personal data we hold about you.
- •Correction: Request correction of inaccurate or incomplete data.
- •Deletion: Request deletion of your personal data (“right to be forgotten”).
- •Portability: Receive your data in a structured, machine-readable format.
- •Restriction: Request that we restrict processing of your data in certain circumstances.
- •Objection: Object to processing based on our legitimate interests.
To exercise any of these rights, email us at privacy@kreyato.ai. We will respond within 30 days.
9. Security
We implement industry-standard security measures including encrypted data transmission (TLS), hashed passwords (bcrypt), encrypted storage of OAuth tokens, and regular security reviews. No method of transmission or storage is 100% secure. In the event of a data breach affecting your personal data, we will notify you as required by applicable law.
10. Children's Privacy
Kreyato AI is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice in the platform at least 14 days before the changes take effect. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy or your personal data, please contact us:
4. Social Platform Integrations
When you connect your social accounts, we access only the permissions you explicitly grant. We store long-lived access tokens securely and use them solely to publish content you approve.
pages_manage_posts,instagram_content_publish, and related permissions to post on your behalf. Governed by Meta's Data Policy.You can revoke access at any time from your Kreyato AI account settings or directly from the social platform's app permissions page. Revoking access stops future publishing but does not delete previously published content from those platforms.