Last updated: September 27, 2026

Privacy Policy

This Privacy Policy explains how Kontuur, operated by Chelling Ltd ("we", "us", "our"), collects, uses, and protects your information when you use our platform at kontuur.app.

1. Information We Collect

We collect the following categories of information:

• Account information: name, email address, and password when you register.
• Agency and client data: client names, brand details, and content briefs you enter into the platform.
• Connected-account access tokens:OAuth tokens issued by Meta (Facebook / Instagram) when you connect accounts to Kontuur, used solely to publish, schedule, and retrieve analytics for content you manage through the platform; and, if you connect Canva, Canva's token, used to list and import the designs you choose.
• Generated content: captions, images, and post data created or managed within the platform.
• Usage data: pages visited, features used, browser type, IP address, and timestamps, collected automatically via server logs.
• Billing details: the name, address, email and VAT number you give at checkout.

2. Meta and Instagram Data

When you connect an Instagram or Facebook account, Kontuur requests only the permissions required to perform the functions you authorise:

• Reading your Instagram business profile and page information.
• Publishing content (photos, videos, captions) on your behalf.
• Retrieving post-level insights and analytics.
• Scheduling content to be published at a future time.

We do not access private messages, contacts, or any data beyond what is required for the above functions.

Meta-derived data (profile details, media, and analytics) is stored securely in our database to power the dashboard and reports you see. We never sell, share, or use this data for advertising purposes. Access tokens are encrypted at rest and in transit.

You can revoke Kontuur's access to your Meta accounts at any time from your Facebook Settings → Apps and Websites. Revoking access will remove the connection from Kontuur within 24 hours.

To request deletion of all Meta-derived data we hold about you, visit our Data Deletion page.

3. How We Use Your Information

• To provide, maintain, and improve the Kontuur platform.
• To generate AI-powered social media content on your behalf.
• To publish and schedule posts to connected social media accounts.
• To display analytics and performance data in your dashboard.
• To send transactional emails (post approvals, account notifications).
• To respond to support requests and communicate service updates.
• To detect and prevent abuse, fraud, or security incidents.

4. Third-Party Services

Kontuur uses the following sub-processors that may have access to your data as necessary to provide their services:

• Supabase — database and authentication infrastructure. Data is stored in EU data centers.
• Vercel — hosting and edge delivery.
• Anthropic (Claude AI)— AI model used to generate content suggestions. Content prompts are sent to Anthropic's API; Anthropic's privacy policy governs their handling of API data.
• Resend — transactional email delivery.
• Meta Platforms — the Instagram Graph API and Facebook Marketing API used to publish and retrieve data for connected accounts.
• Stripe — payments; it collects the card and billing details at checkout.
• fal.ai — image generation and editing; it receives the image prompts built from your content, and the images you ask it to edit or cut out.
• Tavily — web search for research; it receives search queries.
• Canva — design import, if you connect it; Kontuur lists and exports the designs you choose.
• Jina AI— reads a client's public Instagram profile page when you give one while setting up a brand; it receives that profile's address.

5. Data Retention

When a plan ends the workspace is paused, not deleted: everything stays until an admin deletes it in Settings. Invoices and credit notes, with the billing details on them, and the payment records Stripe sends us about them are kept for at least ten years, as Bulgarian law requires, even after the workspace is deleted.

You can delete your workspace yourself from Settings, which removes everything in it at once except the invoices, credit notes and payment records described above, or request deletion by contacting us at the address below; we process requests within 30 days.

6. Data Security

We implement industry-standard security measures including encrypted storage, HTTPS transport, and access controls. OAuth tokens are stored encrypted and scoped to the minimum permissions required. Despite these measures, no transmission over the internet is 100% secure.

7. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion of your data.
• Portability: receive your data in a structured, machine-readable format.
• Restriction / objection: restrict or object to certain processing activities.

To exercise any of these rights, contact us at privacy@kontuur.app.

8. Cookies

Kontuur uses only strictly necessary cookies for session management and authentication. We do not use advertising or tracking cookies. A full cookie policy is available on request.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and notify active users by email if the changes are material.

10. Contact

For privacy-related questions or requests, please contact:

Chelling Ltd
UIC 206770508, 27 Gabar St, 1320 Bankya, Bulgaria
Email: privacy@kontuur.app