Privacy Policy

Last updated: April 29, 2026

1. Introduction

kloudboard (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our content creation and social media management platform.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address, name, and authentication credentials through our secure authentication provider (Supabase).

2.2 Social Media Data

When you connect your social media accounts, we access data through official APIs from the following platforms:

  • YouTube: Channel information, video analytics, subscriber counts, and revenue data (via YouTube Data API and YouTube Analytics API)

  • Twitter/X: Profile information, tweet engagement, and follower data

  • Instagram: Profile information and media engagement metrics

  • TikTok: Profile information and video performance data

  • Facebook: Page information and engagement insights

2.3 Content Data

We store scripts, content drafts, and other creative materials you create within our platform. This includes AI-generated content and your edits.

2.4 Usage & Analytics Data

We use PostHog, a product analytics platform hosted in the EU, to understand how you interact with our Service and to improve it. Analytics data is sent through our own domain (first-party proxy) so it is not intercepted by browser extensions. We only create analytics profiles for users who have signed in and accepted our Terms of Service — anonymous visitors are not tracked.

Product analytics

  • Pages you visit and navigation patterns

  • Features you use and actions you take (e.g. creating projects, uploading files, connecting social accounts, inviting team members)

  • Browser type, operating system, screen size, and device type

  • Referral source and landing page when you first sign up

Session replays

We may record your screen interactions (mouse movements, clicks, scrolling, and page content) as session replays to diagnose bugs and improve the user experience. Session replays do not capture passwords, credit card numbers, or other sensitive input fields — these are automatically masked. Replays are stored on PostHog's EU servers and are only accessible to kloudboard team members.

Error & performance monitoring

  • JavaScript errors and exceptions you encounter, including stack traces and browser context

  • Page load times and web performance metrics

Feature flags & experiments

We use PostHog feature flags to gradually roll out new features and run A/B tests. This means you may see different versions of a feature while we evaluate improvements. Your flag assignments are linked to your account.

Organization-level analytics

We group analytics data by workspace so we can understand usage patterns at the team level (e.g. how many team members are active, which features a workspace uses most). This data is aggregated and linked to your workspace, not shared with other workspaces.

You can opt out of all analytics (including session replays) at any time by contacting us at support@kloudboard.com. Opting out does not affect your ability to use the Service.

3. How We Use Your Information

  • Provide and maintain our services

  • Display your social media analytics in a unified dashboard

  • Generate AI-powered content suggestions and scripts

  • Process payments and manage subscriptions

  • Send service-related communications

  • Analyze product usage and session replays to diagnose bugs and improve features

  • Run A/B tests and feature experiments to evaluate improvements

  • Monitor errors and application performance

  • Comply with legal obligations

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

  • All social media OAuth tokens are encrypted at rest using AES-256 encryption

  • Data is transmitted using TLS/SSL encryption

  • We use Supabase for secure data storage with row-level security

  • Payment information is processed securely through Stripe

5. Third-Party Services

We integrate with the following third-party services:

  • Supabase: Authentication and database services

  • Stripe: Payment processing

  • Google APIs: YouTube and Calendar integration

  • Twitter API: Twitter/X integration

  • Meta APIs: Instagram and Facebook integration

  • TikTok API: TikTok integration

  • Anthropic/Google AI: AI content generation

  • Resend: Email communications

  • PostHog: Product analytics, session replays, feature flags, and error monitoring (EU-hosted, first-party proxied via our domain)

6. Data Sharing

We do not sell your personal information. We may share data only:

  • With service providers who assist in operating our platform

  • When required by law or to protect our rights

  • With your consent or at your direction

  • With team members you invite to collaborate (limited to shared workspace data)

7. Your Rights

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Delete your account and associated data

  • Disconnect social media accounts at any time

  • Export your content and data

  • Opt out of product analytics, session replays, and A/B tests

  • Opt out of marketing communications

  • Request a copy of all data we hold about you (GDPR data subject access request)

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion:

  • Personal data is deleted within 30 days, except where retention is required by law

  • Social media tokens are immediately revoked upon disconnection

  • Analytics data and session replays linked to your account are deleted from PostHog within 30 days

  • Aggregated, anonymized analytics (e.g. total page views) may be retained indefinitely as they cannot be linked back to you

9. Cookies & Local Storage

We use the following cookies and browser storage:

  • Authentication cookies: Essential for keeping you signed in (Supabase session tokens). These are strictly necessary and cannot be disabled.

  • Analytics cookies: PostHog sets a first-party cookie to identify you across sessions, record page views, track feature usage, and power session replays. This data is linked to your account and stored on PostHog's EU servers.

  • Feature flag cookies: PostHog may store feature flag assignments so you see a consistent experience across page loads.

  • Preference storage: We store your selected workspace and theme preference in your browser's local storage.

We do not use third-party advertising or remarketing cookies. By creating an account and accepting our Terms of Service, you consent to the analytics and feature-flag cookies described above. You may opt out of non-essential cookies (analytics and session replays) by contacting support@kloudboard.com.

10. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at: support@kloudboard.com