This policy explains what information Kindle collects when you use the service, why we collect it, how long we keep it and the choices you have. It applies to the Kindle web application and the marketing site.
1. Who we are
Kindle is an advertising management platform that connects to your own advertising, analytics and commerce accounts, and helps you plan, publish and measure campaigns. For the purposes of data protection law, Kindle is the controller of your account data and a processor of the advertising data you bring in from connected platforms.
2. Information we collect
- Account information — your name, email address, password (stored only as a salted hash by our authentication provider) and the workspaces you belong to.
- Workspace content — brand information, campaign briefs, generated creatives, landing pages, leads and notes that you or your team create in the product.
- Connected platform data — when you connect Meta, Google Ads, Google Analytics, Google Merchant Center or Shopify, we retrieve the accounts, campaigns, metrics, orders and leads that the permissions you granted allow. We only request the permissions the features you use actually need.
- Access credentials — access and refresh tokens issued by those platforms. They are encrypted before being written to our database and are never exposed to your browser.
- Billing information — plan, invoices, payment status and a masked reference to the payment instrument (for example the last four digits of a card, or a partially hidden UPI ID). Full card numbers and UPI credentials are handled by our payment processor and never reach our servers.
- Technical information — log records such as IP address, browser type, timestamps and error traces, kept for security and troubleshooting.
3. How we use information
- To provide the service: authenticate you, run your workspace and sync your accounts.
- To publish and manage advertising on the platforms you connect, only when you ask us to.
- To generate creatives, copy, landing pages and recommendations. Prompts and brand context are sent to our AI providers for this purpose.
- To take payment, issue invoices and keep records required by tax law.
- To protect the service against abuse, fraud and security incidents.
- To send service communications such as invitations, receipts and important notices.
We do not sell your personal data, and we do not use the advertising data of one customer to benefit another.
4. Who we share it with
We share data only with the providers needed to run the service:
- Our hosting and database provider, which stores your workspace data.
- The advertising, analytics and commerce platforms you choose to connect, in order to read and publish on your behalf.
- Our AI providers, for generating the content you request.
- Our payment processor, for taking and confirming payments.
- Our email provider, for transactional messages.
- Authorities or advisors, where we are legally required to do so or need to establish or defend legal claims.
5. How long we keep it
Workspace data is kept for as long as your account is active. When you delete your account we remove your workspace content and revoke stored platform credentials. Invoices and payment records are retained for as long as tax and accounting law requires. Backups are cycled out on a rolling basis.
6. Security
Traffic is encrypted in transit. Platform tokens are encrypted at rest with a key that is held outside the database. Access to workspace data is restricted by row-level rules so that members of one workspace cannot read another. Secrets are never included in client code or in responses sent to your browser.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to certain processing, and to withdraw consent. You can disconnect any platform at any time from Account → Integrations, which revokes and removes the stored credentials. To exercise any other right, contact us using the details below.
8. International transfers
Our providers may process data in countries other than your own. Where that happens, we rely on the transfer safeguards those providers offer, such as standard contractual clauses.
9. Children
The service is not intended for anyone under 18, and we do not knowingly collect data from children.
10. Changes
We may update this policy as the product changes. Material changes will be announced in the application. The date at the top shows when this version took effect.
11. Contact
Questions about this policy or your data can be sent to privacy@kindle.app.