Kitevo

Legal

Privacy Policy

Last updated: July 2026

1. Who we are

Kitevo ("we", "us", or "our") is a platform that allows content creators to build and share professional media kits. Our service is operated by Kitevo and our website is located at getkitevo.com.

2. What data we collect

We collect the following categories of data:

  • Account data: Your name, email address, and password (stored as a bcrypt hash) when you create an account.
  • Profile data: Username, bio, avatar image, and social profile links you enter in your profile.
  • Kit content: Work samples, rates, brand partnerships, and any other content you add to your media kit.
  • Instagram data: Follower count, engagement rate, audience demographics, and recent post data fetched via the Instagram Graph API when you authorize the connection. We do not receive or store your Instagram password.
  • YouTube data: Channel name, subscriber count, total view count, video count, and recent videos with their view and like counts, fetched via the YouTube Data API when you authorize the connection. We do not receive or store your Google password.
  • Billing data: Subscription and payment information is handled directly by Stripe. We store only your Stripe Customer ID — we never store full card numbers.
  • Usage data: Kit view counts and referrer information (which URL sent a visitor to your kit), used to display analytics in your dashboard.

3. How we use your data

  • To operate and improve the Kitevo service.
  • To display your public media kit page to visitors (brands and agencies) you share your link with.
  • To process payments and manage your subscription via Stripe.
  • To fetch your Instagram and YouTube statistics on your behalf and display them on your kit.
  • To send transactional emails (account confirmation, billing receipts). We do not send marketing emails without explicit consent.

4. Instagram Graph API data

When you connect your Instagram account, we use Meta's official Instagram Graph API under their Platform Policy. Specifically:

  • We request only the permissions needed to read your public business/creator account metrics.
  • We store your Instagram access token in our database, solely to refresh your kit statistics. Our database provider encrypts data at rest.
  • We do not use your Instagram data for advertising, sell it to third parties, or share it beyond displaying it on your own kit page.
  • You can disconnect Instagram at any time from your dashboard. Upon disconnection, we delete your stored access token.

5. YouTube API Services

Kitevo uses YouTube API Services to read your channel statistics when you connect your YouTube account. By using this feature you are also agreeing to be bound by the YouTube Terms of Service.

  • We request read-only access. Kitevo cannot upload, edit, or delete anything on your channel.
  • We read your subscriber count, total views, video count, and recent videos with their view and like counts, solely to display them on your own media kit.
  • Google's handling of your data is governed by the Google Privacy Policy.
  • You can revoke Kitevo's access at any time from your dashboard, or through Google's security settings page. On revocation we delete the stored tokens and the cached statistics derived from them.

6. Deleting your data

There are three ways to remove your data:

  • Disconnect a platform. Disconnecting Instagram or YouTube from your dashboard deletes the stored access tokens and the statistics we cached from them.
  • Remove Kitevo from Instagram or Facebook. If you remove Kitevo in your Instagram or Facebook app settings, Meta notifies us automatically and we delete all data received from Meta, along with any statistics derived from it. Your Kitevo account and any kit content you wrote yourself are left intact, since you may have signed up by email.
  • Delete your account. Deleting your account from profile settings permanently removes your profile, kits, inquiries, messages, and all connected platform data. This cannot be undone.

7. Data sharing

We do not sell your personal data. We share data only with service providers who help us operate the platform, including:

  • Vercel — hosting and infrastructure.
  • Neon / PostgreSQL — database storage.
  • Stripe — payment processing.
  • Meta (Instagram) — only to fetch the API data you authorize.

All service providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

8. Your rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data. Delete your account from the dashboard and your data will be removed within 30 days.
  • Withdraw consent for Instagram data access at any time via your dashboard or via Meta's app settings.

9. Data retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance reasons.

10. Security

We implement industry-standard security practices including encrypted storage of credentials, HTTPS for all data in transit, and strict access controls on our database. No system is 100% secure; if you believe your account has been compromised, contact us immediately via your dashboard.

11. Cookies

We use a minimal set of cookies: a session cookie for authentication, and a subscription-status cookie to avoid redundant API calls. We do not use advertising or tracking cookies. We do not use third-party analytics cookies.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice in your dashboard. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

13. Contact

Questions about this Privacy Policy? Contact us via the dashboard.