Privacy Policy

• Account details: your email address and, if you sign in with Google, your name and profile picture from your Google account.
• What you create: messages you send the Director, product links you scan and the product details we read from them, video prompts, generated videos, captions and posting schedules.
• Connected social accounts: when you connect TikTok, Instagram or YouTube, an access token for that account, your username, and performance numbers for your posts (views, likes, shares, comments, watch time, retention). Platforms only share audience data in aggregate; we never receive the identity of individual viewers.
• Billing: your plan, credit balance and payment history. Card details are entered on Stripe's page and never reach our servers.
• Technical data: log data such as IP address, browser type and timestamps, kept by our hosting provider for security and debugging.

• To run the service: sign you in, generate videos, post them where and when you ask, and show your analytics.
• To charge for credits and plans, and to keep an accurate credit ledger.
• To keep Kapwy secure, prevent abuse and fix problems.
• To contact you about your account or important changes.

If you sign in with Google, Kapwy receives your name, email address and profile picture (the "openid", "email" and "profile" permissions). We use this only to create and identify your Kapwy account and to show who is signed in. We do not use Google user data for advertising, do not sell it, and do not transfer it to anyone except the service providers needed to run Kapwy below.

Kapwy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. If you connect a YouTube channel through our posting partner, that connection follows the same policy and is used only to upload the videos you choose and read their performance.

We use these service providers to run Kapwy. Each receives only what it needs:

• Supabase: account sign-in and our database (hosted in Singapore).
• Vercel: hosting the website and app.
• Anthropic: the Claude model that powers the Director reads your messages and product details to reply.
• fal.ai: renders videos from your prompts and product photos.
• Firecrawl: reads product pages that block ordinary requests.
• Post for Me: connects your TikTok, Instagram and YouTube accounts, publishes the videos you schedule, and returns post metrics.
• Windsor.ai: reads Google Ads reporting data where Google Ads is connected.
• Stripe: payments and subscriptions.

Some providers process data outside Singapore, including in the United States. Where they do, we rely on their contractual commitments to protect it to a standard comparable to the PDPA. We do not sell your personal data and do not share it for advertising.

Videos and captions you publish through Kapwy become public on the platform you choose and are governed by that platform's terms. Deleting them from Kapwy does not remove them from TikTok, Instagram or YouTube.

We keep your account data while your account is open. When you delete your account we delete your profile, products, videos, conversations and connected-account tokens within 30 days, except billing records we must keep for tax and accounting purposes (generally 5 years).

• Disconnect any social account at any time from Settings; we stop using its token immediately.
• Delete your account yourself from Settings, or ask us for a copy of your personal data or to correct it.
• Withdraw consent for us to use your data, which may mean we can no longer provide the service.
• You can also revoke Kapwy's access to your Google account at myaccount.google.com/permissions.

Data is encrypted in transit. Database access is restricted per user with row-level security, secrets are kept server-side, and credits and payments can only be changed by our servers. No system is perfectly secure; if a breach affects you we will tell you as the PDPA requires.

Kapwy is for businesses and is not intended for anyone under 18.

We will post changes here and update the date above; significant changes will be emailed to you. Questions or requests: veldanleeyh@gmail.com.