Privacy Policy

When you use Kappi we collect:

• Contact details. Your mobile number and email address, used to verify you can receive Kappi’s weekly notifications and to sign you in. We do not use these for marketing.
• Instagram access token and account metadata. When you connect an Instagram account, we receive an access token from Meta, your Instagram user id, your handle, and your profile photo. We store these so we can publish the posts you approve to the account you connected.
• Photos you upload. Stored in a private Supabase Storage bucket scoped to your business.
• Notes about your photos, including voice recordings. When you tell Kappi what a photo shows (by typing, or by recording a voice note), we store that note and, for a voice note, the audio recording itself and its transcript once it has been processed.
• Post captions, images, and schedule. The weekly posts Kappi proposes, any edits you make to the text, and their approval and publish status.
• Comments on your posts. When you open Comments, we read the comments on your connected account's posts (username, text and time) from Instagram to show them to you. We reply to, hide, unhide or delete a comment only when you click to do so.
• Instagram direct messages. When you open Messages, we read your connected account's conversations from Instagram, and Instagram notifies us of new messages, so you can read them and reply within Instagram's 24-hour window. We send a message only when you write and send it.
• Insights. Reach, views, likes, comments, saves, shares and engaged accounts for your posts and account, read from Instagram to show you how your posts perform.
• WhatsApp messages with Kappi. If you chat with Kappi on WhatsApp, we receive your WhatsApp number, profile name, and the messages and media you send, through Meta's WhatsApp Business Platform, so Kappi can reply and keep your business details up to date.

We do not collect your contacts, your followers list, or content from accounts you have not connected to Kappi.

We use the information above only to:

• Sign you in, and verify your mobile number and email during setup.
• Publish the posts you approve to your connected Instagram account, at the time you scheduled or immediately when you approve.
• Send you the weekly notifications you signed up for (a text or email when your posts are ready, a reminder before the approval cutoff, and a confirmation once a post goes live).
• Show you the comments on your posts, and reply to, hide, unhide or delete a comment when you choose to.
• Show you your Instagram messages and send the replies you write.
• Show you how your posts and account perform.
• Use AI service providers to analyse your photos, transcribe voice notes, draft your posts and reply to you on WhatsApp.

We do not use your data for advertising or profiling, and we do not sell your data.

We rely on the following service providers to operate Kappi:

• Supabase, for our database, authentication, and file storage. Hosted in the United States.
• Vercel, for web hosting.
• Meta Platforms (Instagram API), so we can publish your approved posts, read your account information and insights, and read and manage your comments and messages on your behalf.
• Anthropic and OpenAI, through Vercel’s AI Gateway, to analyse photos, transcribe voice notes, draft posts and reply on WhatsApp. We do not send your Instagram comments or messages to them.
• Meta Platforms (WhatsApp Business Platform), to exchange WhatsApp messages with you.
• Resend, to send emails.
• Bird, to verify your phone number.

• Instagram access token: stored until you disconnect the account in Settings, or revoke our access on Instagram’s side.
• Uploaded photos and their notes: kept while your Kappi account is active, so posts that already used a photo are unaffected if you later remove it from your library.
• Post drafts and post history: retained for as long as your account is active, as your record of what was posted.
• Comment and message notifications from Instagram: kept while your account is active, deleted on account deletion.
• WhatsApp messages: kept while your account is active, deleted on account deletion.
• All data: deleted on account deletion (see below).

You can request deletion of your account and all associated data at any time. We aim to confirm deletion within 30 days of the request, typically within 7 days.

See the Data Deletion page for the exact process

Where applicable law gives you additional rights (for example GDPR or CCPA, such as access, portability, correction, or objection), email the address below and we will honor the request within statutory time limits.

Kappi is intended for business owners and is not directed to anyone under the age of 18. We do not knowingly collect information from children.

We will update this page when we change how we handle your data. The last-updated date above reflects the most recent revision. We will email active businesses about material changes.

Kappi is operated by Asobi Labs, Inc..

Email

maria@asobi-labs.com

Mailing address

Asobi Labs, Inc. · 25 Kent Ave, Suite 401 · Brooklyn, NY 11249