Privacy Policy

Introduction

Kwill ("we," "our," or "us") operates the kwill.io platform, a content management system that helps organizations manage their online presence, including website content, social media publishing, and newsletters. Kwill is operated by Kwill.io LLC, a New York company owned by Joshua Huckabee.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and related services. It also explains how we handle information about the people who visit our customers' websites and subscribe to their newsletters. Please read this policy carefully. By using Kwill, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

When you use Kwill, we may collect information that you provide directly:

  • Account Information: Name, email address, organization name, and password when you create an account.
  • Profile Information: Additional details you provide such as your organization's mission statement, logo, and branding preferences.
  • Content: Text, images, videos, and other media you upload to manage your website, social media posts, and newsletters.
  • Communication Data: Information in emails, messages, or other communications you send to us.
  • Payment Information: Billing details processed securely through our payment processor, Stripe. We do not store complete credit card numbers on our servers.

Information Collected Automatically

When you access Kwill, we automatically collect certain information:

  • Usage Data: Pages visited, features used, actions taken within the platform, and timestamps.
  • Device Information: Browser type, operating system, device identifiers, and IP address.
  • Server Logs: Like most websites, our servers record basic information about each request, including the page, browser and device type, time, and full IP address. We keep these logs for up to 90 days and use them for security and to keep the service running.
  • Analytics Data: Our analytics are first-party and run by Kwill, not by Google, Meta, or another outside service. For each visit we store a masked IP address (the last part is replaced with zeros before it is stored), the browser's user agent, the page visited, the referring site, any campaign tags in the link, and two random IDs from analytics cookies (one expires after 30 minutes, the other after one year). We don't look up location from IP addresses, and we use no advertising cookies, tracking pixels, or retargeting.

Information from Third-Party Services

When you connect third-party services to Kwill, we may receive information from those services:

  • Social Media Platforms: When you connect Facebook, Instagram, or Bluesky accounts, we receive access tokens and basic profile information necessary to publish content on your behalf. We only access the permissions you explicitly grant.
  • Email Services: When you use our newsletter features, we process subscriber email addresses and delivery results (delivered, bounced, or reported as spam). Open and click tracking is a setting each customer controls, and it can be turned off.

Data We Process for Our Customers

Organizations use Kwill to run their own websites and newsletters. When you visit one of those websites, fill out one of its forms, or subscribe to its newsletter, we process that information on behalf of that organization. It belongs to the organization, and its own privacy policy governs how it is used.

  • Used only to provide the service: We process customer data only to run that customer's site and newsletter. We don't use it for our own marketing, and we don't use it to build profiles of anyone.
  • Kept separate: Every customer has its own account. No customer can see another customer's data, including when customers are on opposite sides of an issue or an election.
  • Never sold or shared: We never sell, rent, or share customer data with anyone, including other Kwill customers. The only outside services that handle it are the ones that run the platform, such as hosting and email delivery.
  • Not a Kwill asset: Customer data is not an asset of Kwill and will not be sold or transferred as part of any sale, merger, or other business transfer. If Kwill stops operating, each customer can take its data with it, and we will delete what remains.

How We Use Your Information

We use the information we collect about our account holders to:

  • Provide Services: Operate and maintain the Kwill platform, including content management, social media publishing, and newsletter delivery.
  • Improve Our Platform: Analyze how account holders use the Kwill application to enhance features, fix issues, and develop new functionality. We don't use our customers' website visitor or subscriber data for this.
  • Communicate: Send service-related notifications, respond to inquiries, and provide customer support.
  • Process Payments: Manage subscriptions and billing through our payment processors.
  • Ensure Security: Detect and prevent fraud, abuse, and security incidents.
  • Comply with Legal Obligations: Meet legal requirements and respond to lawful requests from authorities.

Social Media Integration

Facebook and Instagram

When you connect your Facebook Page or Instagram Business account to Kwill:

  • Data Access: We access only the permissions necessary to publish content on your behalf, such as posting photos, videos, and text to your connected accounts.
  • Data Storage: We store access tokens securely to maintain your connection. We do not store your Facebook or Instagram login credentials.
  • Data Use: We use this access solely to publish content you create and schedule through Kwill. We do not access your personal Facebook profile, friends list, or private messages.
  • Data Deletion: You can disconnect your Facebook or Instagram account at any time from Kwill settings. Upon disconnection, we delete stored access tokens and no longer have access to publish to those accounts.

Bluesky

When you connect your Bluesky account:

  • Data Access: We access your account using app passwords you provide to publish content on your behalf.
  • Data Storage: App passwords are stored securely and encrypted.
  • Data Deletion: You can disconnect your Bluesky account at any time, and we will delete stored credentials.

Data Sharing and Disclosure

We do not sell personal information. We may share information in the following circumstances:

  • Service Providers: We work with third-party companies that help us operate our platform (e.g., hosting providers, payment processors, email delivery services). These providers are contractually obligated to protect your information.
  • With Your Consent: We may share information when you direct us to, such as when publishing content to connected social media accounts.
  • Legal Requirements: We may disclose information if required by law, court order, or government regulation.
  • Business Transfers: If Kwill is acquired or merged with another company, information about Kwill's own account holders may be transferred as part of that transaction. Data we process for our customers is never transferred this way (see "Data We Process for Our Customers").
  • Protection of Rights: We may disclose information to protect the safety, rights, or property of Kwill, our users, or the public.

Data Retention

We retain your information for as long as your account is active or as needed to provide services.

  • Server Logs: Up to 90 days.
  • Analytics Data: Up to 13 months, then deleted. IP addresses in analytics are masked before they are stored.
  • Account Data: Deleted within 30 days of account closure.
  • Content: Removed from our systems when an account is closed, though backups may persist for up to 90 days.

You may request deletion of your data at any time by contacting us. If you are a visitor to or subscriber of one of our customers' websites, contact that organization, or contact us and we will pass your request along.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information.
  • Portability: Request a machine-readable copy of your data.
  • Objection: Object to certain processing of your information.
  • Withdraw Consent: Withdraw consent for processing where consent is the legal basis.

To exercise these rights, contact us at privacy@kwill.io.

California Residents

Under the California Consumer Privacy Act (CCPA), California residents have additional rights, including the right to know what personal information is collected, the right to delete, and the right to opt-out of the sale of personal information. We do not sell personal information.

European Economic Area Residents

If you are in the EEA, you have rights under the General Data Protection Regulation (GDPR). Our legal bases for processing include consent, contract performance, and legitimate interests. You may lodge a complaint with your local data protection authority.

Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit (TLS) and at rest
  • Regular security assessments and monitoring
  • Access to customer data limited to the people who run Kwill, and only to operate and support the service
  • Secure credential storage using industry-standard practices

While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

Children's Privacy

Kwill is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete that information promptly.

International Data Transfers

Kwill is based in the United States. If you access our platform from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using Kwill, you consent to such transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of Kwill after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Kwill.io LLC
Email: privacy@kwill.io
Website: https://kwill.io