Privacy policy
This policy explains what personal data KicksPost (“we”) processes, why, with whom it is shared and how long it is kept. It covers the website, the app, the companion bot and emails.
What we collect
Account data: your email address, name, language, time zone and the settings you choose (theme, notifications). Security data: sessions (device, IP address, time of last use), two-factor settings and an audit log of important actions. Connected accounts: Telegram sessions and phone numbers, MAX bot tokens, proxy settings and your own AI keys. Work data: your projects, sources, destinations, lists, media, published post history, leads, audience lists, reports and files. Billing data: plan, invoices and payment status. Support data: tickets and our replies. If you connect the companion bot, we store your Telegram chat id and username. If you turn on push notifications, we store the push address your browser gives us.
How we protect it
Telegram sessions, phone numbers, MAX tokens, AI keys and two-factor secrets are stored encrypted. Phone numbers are shown masked. Connections to the service use HTTPS. Staff can open the admin panel only with two-factor sign-in, and their actions are logged.
Why we process it
To provide the service you asked for (contract), to keep it secure and prevent abuse (legitimate interest), to send service emails and notifications you chose, and product news unless you turn it off in notification settings, and to meet legal obligations. Product news and automatic emails (welcome, trial ending) contain a small image that tells us whether the email was opened; we use it only to count opens.
Data about other people
Lead search and audience collection read public Telegram chats and save what is publicly visible there (for example a username, name, message text and activity status). You decide what to collect and how to use it, so for that data you are the controller and we process it on your behalf. You must have a lawful basis for it.
Who we share it with
We don’t sell personal data. We share only what is needed with: Telegram and MAX (to run your projects through your accounts), AI providers OpenAI, Anthropic and Google (texts sent for rewriting or analysis when you use AI features), NOWPayments (to process crypto payments; we never receive card data), Google (only when you connect your Google account to export a file to Google Sheets), your browser’s push service (Google, Mozilla, Apple or Microsoft) for push notifications you turned on, sent encrypted, our email delivery provider and our hosting provider. We may disclose data when the law requires it.
How long we keep it
Exported files, reports and audience lists: 30 days. Project logs: 30 days. In-app notifications: 90 days. Sessions end after 30 days, or after 7 days without use. Account and work data are kept while your organization exists; after you ask to delete it, we delete it within 30 days, except what we must keep by law (for example payment records).
Your rights
You can see and correct your data in the app, download your files, ask us for a copy of your data, ask us to delete it, object to processing or withdraw consent for product news. Write to support@kickspost.site. You may also complain to your data protection authority.
Cookies
See the cookie policy for the cookies and browser storage we use.
Changes
We will tell you about important changes in the app or by email. Questions: support@kickspost.site.