Privacy Policy

Introduction

Kwill ("we," "our," or "us") operates the kwill.io platform, a content management system that helps organizations manage their online presence, including website content, social media publishing, and newsletters.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and related services. Please read this policy carefully. By using Kwill, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

When you use Kwill, we may collect information that you provide directly:

Account Information: Name, email address, organization name, and password when you create an account.
Profile Information: Additional details you provide such as your organization's mission statement, logo, and branding preferences.
Content: Text, images, videos, and other media you upload to manage your website, social media posts, and newsletters.
Communication Data: Information in emails, messages, or other communications you send to us.
Payment Information: Billing details processed securely through our payment processor, Stripe. We do not store complete credit card numbers on our servers.

Information Collected Automatically

When you access Kwill, we automatically collect certain information:

Usage Data: Pages visited, features used, actions taken within the platform, and timestamps.
Device Information: Browser type, operating system, device identifiers, and IP address.
Analytics Data: We use privacy-first analytics to understand how our platform is used. This data is aggregated and does not include personal identifiers.

Information from Third-Party Services

When you connect third-party services to Kwill, we may receive information from those services:

Social Media Platforms: When you connect Facebook, Instagram, or Bluesky accounts, we receive access tokens and basic profile information necessary to publish content on your behalf. We only access the permissions you explicitly grant.
Email Services: When you use our newsletter features, we process subscriber email addresses and engagement metrics.

How We Use Your Information

We use the information we collect to:

Provide Services: Operate and maintain the Kwill platform, including content management, social media publishing, and newsletter delivery.
Improve Our Platform: Analyze usage patterns to enhance features, fix issues, and develop new functionality.
Communicate: Send service-related notifications, respond to inquiries, and provide customer support.
Process Payments: Manage subscriptions and billing through our payment processors.
Ensure Security: Detect and prevent fraud, abuse, and security incidents.
Comply with Legal Obligations: Meet legal requirements and respond to lawful requests from authorities.

Social Media Integration

Facebook and Instagram

When you connect your Facebook Page or Instagram Business account to Kwill:

Data Access: We access only the permissions necessary to publish content on your behalf, such as posting photos, videos, and text to your connected accounts.
Data Storage: We store access tokens securely to maintain your connection. We do not store your Facebook or Instagram login credentials.
Data Use: We use this access solely to publish content you create and schedule through Kwill. We do not access your personal Facebook profile, friends list, or private messages.
Data Deletion: You can disconnect your Facebook or Instagram account at any time from Kwill settings. Upon disconnection, we delete stored access tokens and no longer have access to publish to those accounts.

Bluesky

When you connect your Bluesky account:

Data Access: We access your account using app passwords you provide to publish content on your behalf.
Data Storage: App passwords are stored securely and encrypted.
Data Deletion: You can disconnect your Bluesky account at any time, and we will delete stored credentials.

Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

Service Providers: We work with third-party companies that help us operate our platform (e.g., hosting providers, payment processors, email delivery services). These providers are contractually obligated to protect your information.
With Your Consent: We may share information when you direct us to, such as when publishing content to connected social media accounts.
Legal Requirements: We may disclose information if required by law, court order, or government regulation.
Business Transfers: If Kwill is acquired or merged with another company, your information may be transferred as part of that transaction.
Protection of Rights: We may disclose information to protect the safety, rights, or property of Kwill, our users, or the public.

Data Retention

We retain your information for as long as your account is active or as needed to provide services. If you delete your account:

Account Data: Deleted within 30 days of account closure.
Content: Removed from our systems, though backups may persist for up to 90 days.
Analytics Data: Aggregated analytics may be retained indefinitely as they do not identify individuals.

You may request deletion of your data at any time by contacting us.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access: Request a copy of the personal information we hold about you.
Correction: Request correction of inaccurate or incomplete information.
Deletion: Request deletion of your personal information.
Portability: Request a machine-readable copy of your data.
Objection: Object to certain processing of your information.
Withdraw Consent: Withdraw consent for processing where consent is the legal basis.

To exercise these rights, contact us at privacy@kwill.io.

California Residents

Under the California Consumer Privacy Act (CCPA), California residents have additional rights, including the right to know what personal information is collected, the right to delete, and the right to opt-out of the sale of personal information. We do not sell personal information.

European Economic Area Residents

If you are in the EEA, you have rights under the General Data Protection Regulation (GDPR). Our legal bases for processing include consent, contract performance, and legitimate interests. You may lodge a complaint with your local data protection authority.

Data Security

We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit (TLS) and at rest
Regular security assessments and monitoring
Access controls limiting employee access to personal data
Secure credential storage using industry-standard practices

While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

Children's Privacy

Kwill is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete that information promptly.

International Data Transfers

Kwill is based in the United States. If you access our platform from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using Kwill, you consent to such transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of Kwill after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Kwill
Email: privacy@kwill.io
Website: https://kwill.io

For data protection inquiries, you may also contact our Data Protection Officer at dpo@kwill.io.