Privacy Policy

1. Introduction

kloudboard (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our content creation and social media management platform.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address, name, and authentication credentials through our secure authentication provider (Supabase).

2.2 Social Media Data

When you connect your social media accounts, we access data through official APIs from the following platforms:

• YouTube: Channel information, video analytics, subscriber counts, and engagement data (via YouTube Data API and YouTube Analytics API)

• Twitter/X: Profile information, tweet engagement, and follower data

• Instagram: Profile information and media engagement metrics

• TikTok: Profile information and video performance data

• Facebook: Page information and engagement insights

2.3 Content Data

We store scripts, content drafts, and other creative materials you create within our platform. This includes AI-generated content and your edits.

2.4 Usage & Analytics Data

We use PostHog, a product analytics platform hosted in the EU, to understand how you interact with our Service and to improve it. Analytics data is sent through our own domain. Browser analytics follows your cookie preferences and applicable regional settings. We create account-linked analytics profiles only for signed-in users; permitted anonymous usage events do not create an account profile. Accepting our Terms of Service does not itself grant optional-cookie consent.

Product analytics

• Pages you visit and navigation patterns

• Features you use and actions you take (e.g. creating projects, uploading files, connecting social accounts, inviting team members)

• Browser type, operating system, screen size, and device type

• Referral source and landing page when you first sign up

Session replays

We may record your screen interactions (mouse movements, clicks, scrolling, and page content) as session replays to diagnose bugs and improve the user experience. Session replays do not capture passwords, credit card numbers, or other sensitive input fields — these are automatically masked. Replays are stored on PostHog's EU servers and are only accessible to kloudboard team members.

Error & performance monitoring

• JavaScript errors and exceptions you encounter, including stack traces and browser context

• Page load times and web performance metrics

Feature flags & experiments

We use PostHog feature flags to gradually roll out new features and run A/B tests. This means you may see different versions of a feature while we evaluate improvements. Your flag assignments are linked to your account.

Organization-level analytics

We group analytics data by workspace so we can understand usage patterns at the team level (e.g. how many team members are active, which features a workspace uses most). This data is aggregated and linked to your workspace, not shared with other workspaces.

AI assistant interactions

We review how the kloudie AI assistant is used, including the requests you send it, to understand which capabilities people rely on, improve responses, and guide what we build next. This review is internal only, limited to authorized team members, and is never used to train third-party AI models or shared outside kloudboard.

You can opt out of all analytics (including session replays and AI-interaction review) at any time using the preference control at the bottom of this page while signed in, or by contacting us at support@kloudboard.com. Opting out does not affect your ability to use the Service.

3. How We Use Your Information

• Provide and maintain our services

• Display your social media analytics in a unified dashboard

• Generate AI-powered content suggestions and scripts

• Process payments and manage subscriptions

• Send service-related communications

• Analyze product usage and session replays to diagnose bugs and improve features

• Run A/B tests and feature experiments to evaluate improvements

• Monitor errors and application performance

• Comply with legal obligations

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

• All social media OAuth tokens are encrypted at rest using AES-256 encryption

• Data is transmitted using TLS/SSL encryption

• We use Supabase for secure data storage with row-level security

• Payment information is processed securely through Stripe

5. Third-Party Services

We integrate with the following third-party services:

• Supabase: Authentication and database services

• Stripe: Payment processing

• Google APIs: Sign-in, YouTube, Calendar, and Drive (see Google API Services below)

• Twitter API: Twitter/X integration

• Meta APIs: Instagram and Facebook integration

• TikTok API: TikTok integration

• Anthropic/Google AI: AI content generation

• Resend: Email communications

• Campaign measurement: Trybe (public-site campaign attribution and first-payment conversion reporting)

• PostHog: Product analytics, session replays, feature flags, and error monitoring (EU-hosted, first-party proxied via our domain)

Google API Services

kloudboard's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. See the Google API Services User Data Policy, including the Limited Use requirements.

kloudboard uses YouTube API Services to show channel, video, and analytics data in the workspace. By connecting YouTube you also agree to the YouTube Terms of Service and Google's Privacy Policy. YouTube Terms of Service · Google Privacy Policy. Disconnect YouTube at any time from workspace settings.

Google user data is used only to provide the kloudboard features you enable (sign-in, YouTube analytics, Calendar, and Drive). We do not use it to serve ads, train public models, or sell it to data brokers.

6. Data Sharing

We do not sell your personal information. We may share data only:

• With service providers who assist in operating our platform

• When required by law or to protect our rights

• With your consent or at your direction

• With team members you invite to collaborate (limited to shared workspace data)

7. Your Rights

You have the right to:

• Access your personal data

• Correct inaccurate data

• Delete your account and associated data

• Disconnect social media accounts at any time

• Export your content and data

• Opt out of product analytics, session replays, and A/B tests

• Opt out of marketing communications

• Request a copy of all data we hold about you (GDPR data subject access request)

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion:

• Personal data is deleted within 30 days, except where retention is required by law

• Social media tokens are immediately revoked upon disconnection

• Analytics data and session replays linked to your account are deleted from PostHog within 30 days

• Aggregated, anonymized analytics (e.g. total page views) may be retained indefinitely as they cannot be linked back to you

9. Cookies & Local Storage

Essential cookies keep the service working. Where prior permission is required, optional analytics and marketing cookies stay off until you choose them. Our public-site cookie banner appears only in supported opt-in regions; it does not appear in your dashboard. In other locations there is no automatic banner. You can review or withdraw your browser choices below, and we honor Global Privacy Control and account opt-outs. Choices last up to 90 days. We use the following cookies and browser storage:

• Authentication cookies: Essential for keeping you signed in (Supabase session tokens). These are strictly necessary and cannot be disabled.

• Marketing cookies: With permission, Google Ads, our campaign measurement provider, and FirstPromoter measure campaign or referral attribution. We store campaign and referral identifiers for up to 90 days. FirstPromoter receives permitted referral visits and attribution identifiers. Separately, our affiliate commission administration sends signup email/account identifiers and billing amounts, currency, and event identifiers. Browser cookie choices do not erase existing commission records.

• Analytics cookies: PostHog sets a first-party cookie to identify you across sessions, record page views, track feature usage, and power session replays. This data is linked to your account and stored on PostHog's EU servers.

• Feature flag cookies: PostHog may store feature flag assignments so you see a consistent experience across page loads.

• Preference storage: We store your selected workspace and theme preference in your browser's local storage.

Ad measurement is optional. If you enable advertising measurement in the preferences below, we store ad click identifiers and campaign information for up to 90 days and share verified signup, trial-start, and first paid subscription events with Google Ads. Payment events include the amount and currency collected. We do not send your email, name, or workspace content for this measurement, and we do not use it for personalized advertising. Declining does not affect your account. You can withdraw permission using “Cookie preferences” on this page; withdrawal stops future uploads but does not remove data already received by Google. Analytics and marketing can be selected separately in Cookie preferences. The account-wide analytics opt-out is an additional control and takes precedence. You may opt out of product analytics and session replays by contacting support@kloudboard.com.

10. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at: support@kloudboard.com