Privacy Policy

Last updated: 2026-07-06 [DEEP_TO_REVIEW]

kuhuku (“kuhuku”, “we”, “us”, or “our”) is a social media scheduling service operated by Taaj Studios. This Privacy Policy explains what information we collect, how we use it, and the choices you have. [DEEP_TO_REVIEW]

1. Information we collect

We collect the following categories of information:

• Account information: your name, email address, password hash, and organization name when you create an account.
• Content you upload: photos, videos, captions, hashtags, scheduling metadata, and any other material you provide for publishing.
• Connected platform data: when you connect an Instagram, TikTok, YouTube, Facebook, or Threads account, we receive OAuth tokens and profile identifiers from that platform under their terms.
• Usage and technical data: log data, device identifiers, IP address, and browser information collected as you use the service.

2. How we use your information

• To operate and provide the kuhuku service, including publishing your content to connected platforms on your behalf.
• To generate AI-assisted captions and hashtag suggestions based on your prior post history (only within your own account).
• To communicate with you about your account, security notices, and product updates.
• To improve reliability, debug errors, and prevent abuse of the service.

3. Third-party sharing

We do not sell your personal information. We share data only with: [DEEP_TO_REVIEW]

• The social platforms you have explicitly connected, to publish content you have scheduled.
• Infrastructure providers (hosting, storage, error monitoring) acting as our processors under contract.
• Authorities where required by law, subject to a valid legal process.

4. OAuth tokens

When you connect a social account, we store the OAuth access tokens and refresh tokens issued by that platform. These tokens are encrypted at rest and used only to publish content, retrieve post status, and honor your account preferences. You may revoke a connection at any time from your kuhuku dashboard, which will invalidate the stored tokens.

5. Data retention

We retain your account data while your account is active. Content you upload is retained until you delete it or your account is closed. Log data is retained for up to 90 days for operational and security purposes. [DEEP_TO_REVIEW]

6. Your rights

You may:

• Access, correct, or export a copy of your personal data.
• Request deletion of your account and associated content.
• Withdraw consent by disconnecting a platform or closing your account.

To exercise any of these rights, email support@kuhuku.com or use the data deletion form.

7. Children

kuhuku is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

8. International transfers

kuhuku is operated from India. If you access the service from another country, your information will be transferred to and processed in India. [DEEP_TO_REVIEW]

9. Security

We use industry-standard measures — encryption in transit (TLS), encryption at rest for tokens and secrets, and access controls — to protect your data. No system is perfectly secure; report suspected vulnerabilities to security@kuhuku.com.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced in the product and via email to account owners at least 14 days before taking effect.

11. Contact

Taaj Studios — kuhuku, Ludhiana, India. Reach us at support@kuhuku.com. [DEEP_TO_REVIEW]