Privacy Policy

Data we collect

Account information: When you sign up for Kitpager, we collect your email address, display name, authentication details, and account preferences.

Profile and onboarding information: We collect the information you enter during onboarding and profile setup, including your creator name, niche, biography, profile image, social links, location, languages, audience notes, and other details you choose to publish on your media kit.

Connected platform data: When you connect TikTok, YouTube, or Instagram through authorized access, we may collect and store public profile information and account statistics such as username, display name, avatar, follower count, subscriber count, video count, and other performance metrics available through the connected platform.

YouTube data: For YouTube accounts, we may collect channel name, channel avatar, subscriber count, video count, and public video metadata for videos you choose to display, including titles, thumbnails, view counts, like counts, comment counts, and related public metadata.

Content data: We collect URLs, thumbnails, captions, performance statistics, campaign details, and other content metadata that you add to your gallery, reports, or creator profile.

Billing and transaction data: We collect subscription and payment related identifiers, invoice records, plan history, and payment processor references. We do not store full card numbers on our servers.

Usage data: We collect product usage and analytics information such as page visits, referrer URLs, time on page, scroll depth, device type, button clicks, feature usage, and general interaction patterns to help us improve Kitpager.

How we use Google user data

YouTube channel data, such as subscriber count, video count, channel name, and avatar, is used to populate your public Kitpager media kit and show brands a clearer summary of your channel presence.

YouTube public video metadata for the videos you choose to showcase is used to display performance information inside your media kit, analytics views, and campaign reports.

We use Google user data strictly to provide, maintain, and improve the features you explicitly enable within Kitpager.

We do not use Google user data for advertising, remarketing, profiling outside the service, credit scoring, or any unrelated marketing purposes.

We do not sell or rent Google user data.

We only share Google user data with trusted service providers strictly necessary to operate, secure, and maintain the service, and such providers are contractually prohibited from using the data for their own independent purposes.

We do not access or collect more Google user data than is necessary for the functionality you enable, and you can disconnect your Google account at any time.

Access to Google user data is restricted to authorized systems and personnel only when necessary to operate, secure, or maintain the service.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use your data

To provide the Kitpager service, including public media kit pages, social sync, creator dashboards, analytics, inquiry handling, reports, and subscription features.

To personalize your workspace, remember your onboarding progress, and restore drafts or partially completed setup steps when you return.

To send transactional messages such as account verification, security alerts, brand inquiry notifications, payment receipts, subscription confirmations, and product updates.

To improve product quality, performance, and reliability by analyzing aggregated and anonymized usage patterns.

To detect abuse, prevent fraud, enforce our terms, protect accounts, and secure the platform.

Data sharing and disclosure

We do not sell or rent your personal data or Google user data.

We share data only with trusted service providers and subprocessors that help us operate Kitpager, such as hosting, storage, email delivery, payment processing, analytics, infrastructure, and security services.

These providers process data solely on our behalf under contractual obligations and are not permitted to use it for their own independent purposes.

We may disclose information if required by law, to comply with valid legal requests, to enforce our agreements, to protect our rights, or to prevent fraud, abuse, or security incidents.

Data protection and security

We implement industry-standard technical and organizational safeguards to protect personal data and sensitive data from unauthorized access, disclosure, alteration, or destruction.

Sensitive data includes authentication credentials, OAuth tokens, connected platform access tokens, and personally identifiable account information.

All sensitive data is protected using strong security controls, including encryption in transit and encryption at rest.

All data is transmitted over secure HTTPS connections using modern TLS encryption.

Sensitive data, including OAuth tokens and authentication-related information, is encrypted at rest using secure encryption standards.

Data is stored in secure, access-controlled infrastructure designed to prevent unauthorized access.

We enforce strict role-based access control and row-level security to ensure only authorized personnel can access sensitive data.

Administrative and internal system access requires multi-factor authentication.

OAuth tokens and connected platform credentials are stored and processed securely on the server side only and are never exposed to client applications or browsers.

We use logging, monitoring systems, rate limiting, and abuse detection mechanisms to identify and prevent unauthorized access or misuse.

Payment information is handled exclusively by certified payment processors, and we do not store full payment card numbers on our servers.

In the event of a security incident, we will promptly investigate, take appropriate remediation actions, and notify affected users and relevant authorities where required by applicable law.

Your rights and controls

You may disconnect any connected platform at any time, which stops future data synchronization from that platform.

You may request a copy of your data by contacting privacy@kitpager.pro.

You may request correction of inaccurate data through your account settings or by contacting us.

You may request deletion of your account and associated personal data by contacting privacy@kitpager.pro.

You may revoke Kitpager's access to your Google account at any time through your Google permissions page.

Depending on your location, you may have additional rights such as access, portability, restriction, objection, or complaint rights under applicable law.

Data retention and deletion

We retain account data for as long as your account remains active or as needed to provide the service.

When you disconnect a platform, previously fetched data may remain visible in your public media kit until you remove it.

If you delete your account, we will delete or de-identify personal data within a reasonable period, subject to legal, fraud prevention, security, and accounting obligations.

Anonymized or aggregated analytics data may be retained for product improvement purposes.

Backup copies may persist temporarily before automatic deletion according to our retention policies.

Access to sensitive data is limited to authorized personnel only when necessary to operate, maintain, or secure the service, and is subject to strict confidentiality obligations.

Contact

For privacy-related inquiries, contact privacy@kitpager.pro.

For data access, correction, or deletion requests, contact privacy@kitpager.pro or use the data request tools in your account settings.