Privacy Policy
Last updated 13 September 2026
Kairo is a social media management tool operated by Kairo Labs. This policy describes what we collect when you use kairohub.pro, why we collect it, who else sees it, and how you get it deleted.
Who we are
Kairo Labs, Tashkent, Uzbekistan. For anything in this policy, contact privacy@kairohub.pro.
What we collect
Your account
You sign in with Google. From your Google account we receive your name, email address and profile picture — nothing else, and we never receive your Google password. We also store the timezone your browser reports, so scheduled posts publish at the hour you intended.
Your content
The posts, captions and media you create, the schedule you set, and the results of publishing them. Uploaded media is stored in a private bucket and served only through short-lived signed links.
Connected social accounts
When you connect a social account we store the access tokens that platform issues, along with your handle, display name and follower count there. Tokens are encrypted with AES-256-GCM before they are written to the database and are never sent to your browser. We request only the permissions needed to publish and to read the analytics we show you.
Payment details
Payments are processed by Stripe. We never see or store your card number. We keep only your Stripe customer id, which plan you are on, and your subscription status.
Technical records
Server logs (timestamps, error messages, the action taken), and an audit log of sensitive events such as sign-ins, account connections, role changes and publishing. Our logger redacts anything token-shaped before writing.
We do not use advertising cookies or third-party analytics trackers.
Why we collect it
- To run the service — publishing your posts is the product.
- To bill you — Kairo is a paid subscription.
- To keep it secure — rate limiting, abuse prevention, and the audit log.
- To support you — diagnosing a failure you report.
We do not sell your data, and we do not use your content to train machine learning models.
Who else processes it
| Processor | What they handle |
|---|---|
| Supabase | Database, authentication and file storage |
| Vercel | Application hosting and request logs |
| Stripe | Subscriptions and card payments |
| Sign-in only | |
| The social platforms you connect | Receive the posts you choose to publish |
| Anthropic | Text you send to AI Studio, when you use it |
These providers operate outside Uzbekistan, so using Kairo means your data is transferred and stored abroad.
How long we keep it
Your content and account data are kept while your account is open. Delete your workspace and we remove them, including your social tokens, within 30 days. Records we are required to keep for accounting — invoices and payment history — are retained by Stripe for as long as the law requires. Server logs are kept for up to 90 days.
Your rights
You can, at any time:
- Get a copy of your data.
- Correct anything inaccurate.
- Disconnect a social account, which deletes its stored tokens immediately.
- Delete your account and everything in it.
See how to delete your data, or email privacy@kairohub.pro and we will act within 30 days.
Security
- Row-level security in the database: you can only ever read rows in workspaces you belong to.
- Social platform tokens are encrypted at rest and unreachable from the browser.
- All traffic is served over HTTPS.
- Every write is permission-checked on the server, never only in the interface.
No system is perfectly secure. If you find a vulnerability, please tell us at security@kairohub.pro before disclosing it publicly.
Children
Kairo is not intended for anyone under 16, and we do not knowingly collect their data.
Changes
If we change this policy materially we will email you before it takes effect. The date at the top always reflects the current version.