Privacy Policy
How Kinuly handles account information, creator data and the content you ask us to publish.
Last updated October 1, 2026Draft for launch. Operator postal details and deployment-specific disclosures are being finalized. Operator information
01Who is responsible
Kinuly is operated by Kinuly LLC, Delaware, United States. We determine how account, security and billing information is used to operate the service. When an agency supplies creator information, the agency is responsible for its authority to process that information; we use it to provide the requested service. Contact contact@kinuly.social for privacy questions. Our postal contact details are being finalized in the Legal Notice.
02Information we handle
This includes your name, email, workspace settings, password hash, session and verification records, optional two-factor authentication information, connected Instagram account identifiers, usernames, profile images and connection status. We also process uploaded media, captions, schedules, publication results, available performance metrics, usage quotas, invoices and payment transaction references. Operational systems may receive IP addresses, browser information and security logs.
03Product analytics
We measure how Kinuly is used with PostHog, hosted in the European Union, without cookies or browser storage. Pages carry the address of the page visited (stripped of links’ secret tokens and query details other than campaign tags), the referring site, browser type and approximate location derived from the IP address; PostHog is set to discard the IP address itself. Unique visitors are counted with a hash PostHog computes from these signals and a salt that changes daily, so a visitor cannot be followed from one day to the next. Our servers also record a few milestones, such as signing up, connecting a creator, scheduling a post or completing a payment, tied to an internal account number rather than your name or email. We do not record screens, clicks or what you type, and we use these statistics only to improve the service.
04How we use it
We use this information to authenticate you, connect authorized accounts, store and publish content, display insights, allocate subscription capacity, verify payments, send service messages, resolve support requests and prevent abuse. Where applicable, the legal grounds are performance of our agreement, legal obligations and legitimate interests in operating and securing the service. Where consent is required, you can withdraw it without affecting processing that was lawful before withdrawal.
05Instagram and the official Meta APIs
Instagram features use Meta’s official APIs through authorized publishing integration providers. You authorize access on Instagram or Meta; Kinuly does not ask you to provide your Instagram password. Our integration providers process the account authorizations and content required to connect accounts, publish media and retrieve available insights. Meta separately handles information under its own policies. Kinuly is an independent service and is not endorsed by Meta or Instagram.
06Who receives information
Recipients include infrastructure and media-storage providers, our product analytics provider (PostHog), authorized social publishing and analytics integration providers, transactional email providers, crypto payment processors and professional advisers where needed. Publishing providers receive relevant account identifiers, authorization information, media, captions and publication instructions; payment providers receive the invoice and transaction details needed to verify payment. Access by administrators is limited to operating, supporting and securing the service. We may disclose information when required by law. We do not sell personal information or use uploaded content for advertising.
07International processing
Kinuly is operated by a United States entity. The platforms and service providers involved in hosting, publishing, messaging and payments may process data in other countries, including the United Kingdom. The applicable providers, locations and any required transfer arrangements must be confirmed for your deployment. Contact us for information about recipients and applicable safeguards; this policy does not itself create a data processing or international-transfer agreement.
08Retention and deletion
Account and workspace data remain stored while the workspace is maintained. You can delete your account yourself from Account & security: your workspace, uploads, team access, sessions and connected AI assistants are removed at once, and your name and email are erased from the records we must keep, such as invoices. Disconnecting Instagram stops the connection but does not automatically erase existing content, invoices or all historical records. We assess deletion requests against ongoing service needs, fraud prevention and applicable legal or accounting obligations. Backups and third-party systems may follow separate retention cycles. We do not promise immediate erasure from every backup. Public blockchain records and content already published to Instagram cannot be erased from those systems by deleting a Kinuly record.
09Affiliate records
When you join or register through our affiliate program, we store referral attribution, accepted terms, commissions and withdrawal records. Affiliates see counts and commission references rather than referred customer contact details. Administrators can review payout addresses, payment amounts and transaction hashes. Blockchain transfers and their addresses may be publicly visible.
10Your choices and rights
You can update profile information, disconnect creators and revoke the app’s permissions through the relevant Meta or Instagram account settings. You can delete your account at any time from Account & security. For access, correction, export or other requests, email contact@kinuly.social and identify the workspace concerned. We may verify your identity and authority. Depending on the laws that apply, you may also have rights to object, restrict processing, withdraw consent or complain to a data protection authority. Requests are handled within the applicable legal deadlines.
11Security, age and changes
We use measures such as password hashing, access controls and encryption for stored integration secrets. No service can guarantee absolute security. Kinuly is intended for adults aged 18 or over; do not upload unlawful content or sensitive information that is unnecessary for the service. We update this page when our practices change and provide additional notice when required.