Privacy Policy

1. Who We Are

Klypp.ai is operated by JRV Properties LLC, owned by James Veley, based in New Mexico, United States. For privacy-related questions, contact us at james.r.veley@gmail.com.

2. Information We Collect

Information you provide directly

• Account information: Name, email address, and password when you register
• Content inputs: Topics, custom text, tone preferences, image style selections, and other inputs you provide to generate carousels
• Social media connections: Access tokens for Instagram, Facebook, and TikTok accounts you choose to connect (stored securely, used only to post on your behalf)
• Automation settings: Posting schedules, category preferences, platform selections, and frequency settings you configure for automated posting
• Communications: Any messages you send us via email or support channels

Information collected automatically

• Usage data: Number of carousels generated, topics selected, plan type, generation timestamps, automation activity logs, and posting history
• Log data: IP address, browser type, device type, pages visited, and referring URLs
• Cookies: Session tokens and preference cookies necessary to operate the Service (see Section 7)

Information from third parties

• Stripe: We receive confirmation of payment status and subscription details. We do not receive or store your card number, CVV, or full payment details
• Instagram / Facebook: When you connect a Meta account, we receive an access token and the minimum profile information (display name, account ID, page ID) required to post on your behalf
• TikTok: When you connect your TikTok account, we receive an access token and basic profile information (display name, account ID) required to post on your behalf

3. How We Use Your Information

We do not sell your personal information to third parties. We do not use your content inputs or generated outputs to train AI models.

4. How We Share Your Information

We share personal information only in the following circumstances:

• Service providers: We use our own infrastructure for hosting the application, Anthropic (AI text generation), Replicate and fal.ai (AI image generation), Stripe (payment processing), and Cloudinary (image hosting for social posting). These providers process data solely to deliver the Service and are bound by appropriate data protection agreements
• Social platforms: When you instruct us to post content — whether manually or through an automated schedule — we share the generated carousel images and caption with the relevant platform (Instagram, Facebook, or TikTok) via their respective APIs. Images are temporarily hosted on Cloudinary to facilitate this transfer and are not used for any other purpose
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights, property, or safety of Klypp.ai, our users, or the public
• Business transfer: If JRV Properties LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until you delete your account, plus up to 90 days to allow for account recovery
• Generated carousel history: Retained for up to 90 days for your access, then deleted
• Automation configuration and posting logs: Retained while your account is active and for up to 90 days after account deletion
• Cloudinary-hosted images: Temporarily stored for the duration of the posting process; deleted within 30 days of upload
• Usage logs: Retained for up to 12 months for service improvement and fraud prevention
• Billing records: Retained for 7 years as required by US tax and financial regulations
• Social access tokens: Deleted immediately upon disconnecting a social account

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated personal data
• Opt-out of marketing: Unsubscribe from marketing emails at any time using the link in any email we send
• Disable automation: You may disable automated posting at any time from your account settings. Disabling automation will stop any future scheduled posts but will not remove content already published
• Data portability: Request your data in a portable format
• Do Not Sell: We do not sell personal information. If you are a California resident, you have the right to confirm this under the CCPA

To exercise any of these rights, email us at james.r.veley@gmail.com. We will respond within 30 days.

7. Cookies

Klypp.ai uses the following types of cookies:

• Essential cookies: Authentication tokens required to keep you logged in and to maintain your session. These cannot be disabled without breaking the Service
• Preference cookies: Store your settings such as selected image style or tone preferences

We do not use third-party advertising or tracking cookies. You can clear cookies through your browser settings at any time, but doing so will log you out of the Service.

8. Data Security

We implement industry-standard security measures to protect your personal information, including:

• HTTPS encryption for all data in transit
• Passwords stored using PBKDF2 hashing with random salts — we never store plaintext passwords
• JWT-based authentication with expiry and signature verification
• Access controls limiting who can access production data
• Social media access tokens stored with encryption at rest

No system is completely secure. We cannot guarantee absolute security of your information. If you discover a security vulnerability, please disclose it responsibly to james.r.veley@gmail.com.

9. Children's Privacy

Klypp.ai is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13 without verified parental consent, we will delete that information promptly. If you believe we have collected information from a child under 13, contact us at james.r.veley@gmail.com.

10. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights:

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete personal information we have collected about you
• The right to opt out of the sale of personal information — we do not sell personal information
• The right to non-discrimination for exercising your CCPA rights

To submit a CCPA request, email james.r.veley@gmail.com with "CCPA Request" in the subject line.

11. Instagram and Facebook API Integration

If you connect your Instagram or Facebook account, we access the Meta Graph API solely to post content you have generated through Klypp.ai. We:

• Only post content when explicitly directed by you or by your configured automation settings
• Do not read, store, or analyze your followers, private messages, feed content, stories, or other account data beyond what is strictly required to complete a post
• Store your Meta access token securely and delete it immediately when you disconnect your account
• Do not share your access token with any third party other than the Meta API itself during the posting process

Your use of Instagram and Facebook is subject to Meta's Terms of Service and Meta's Privacy Policy.

12. TikTok API Integration

If you connect your TikTok account, we access the TikTok API solely to post content you have generated through Klypp.ai. We:

• Only post content when explicitly directed by you or by your configured automation settings
• Do not read, store, or analyze your TikTok followers, feed, messages, or profile data beyond what is required to complete a post
• Store your TikTok access token securely and delete it immediately when you disconnect your account
• Do not share your TikTok access token with any third party other than the TikTok API itself during the posting process

Your use of TikTok is subject to TikTok's Privacy Policy.

13. Automated Posting and Scheduling

When you enable automated posting, we store your automation configuration (category, schedule, platforms, frequency) and use it to generate and post content on your behalf at the times you specify. In connection with this feature:

• We log each automated post, including the timestamp, platform, topic, and success or failure status, for your reference and for debugging purposes
• Automation logs are retained for up to 90 days
• You can view, pause, or delete your automations at any time from your account dashboard
• Disabling an automation stops future posts; it does not remove content already published to your social accounts

14. International Users

Klypp.ai is operated in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country. By using the Service, you consent to this transfer. Users in the European Economic Area (EEA) or United Kingdom should note that such transfers occur under standard contractual clauses or equivalent safeguards.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of the Service after the effective date of changes constitutes acceptance of the updated policy. If you do not agree to the changes, you must stop using the Service.

16. Contact Us

For privacy questions, requests, or concerns, contact us at:

JRV Properties LLC
Operated by James Veley
New Mexico, United States
james.r.veley@gmail.com