Privacy Policy

• Account details: the email address (and, for legacy accounts, hashed password) you register with.
• Connected-account access: when you connect YouTube, we store the OAuth access and refresh tokens Google issues. These are encrypted at rest (AES-256-GCM) and used only to act on your behalf when you ask us to.
• Content you create: titles, descriptions, tags, captions, scheduling times, saved templates, links, and video ideas you enter, plus a record of posts you publish through us.
• Channel data we read: with your authorization, your channel/profile details and analytics so we can show them to you in the app.

We do not collect precise location, contacts, biometric data, or any data from your device beyond what is needed to serve the app.

• To publish, schedule, and manage the posts and channel settings you request.
• To display your channel information, videos, and analytics back to you.
• To power optional AI helpers (e.g. generating title or description suggestions) — only the text you choose to send is processed for that request.
• To keep you signed in, secure the service, and prevent abuse.

Our basis for processing is your consent, given when you create an account and when you connect a platform — each processing purpose above is something you explicitly initiate. You may withdraw consent at any time (see “Your rights” below); withdrawing does not affect processing already carried out. We do not sell your data, show you ads, or use your content to train AI models.

Kontire’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We request YouTube permissions only to perform actions you explicitly initiate — uploading and editing your videos, managing your channel, and reading your own analytics.
• We do not transfer Google user data to third parties except as needed to provide the service at your request, or as required by law.
• We do not use Google user data for advertising or to train AI/ML models.
• Humans do not read your Google data except with your explicit consent, for security, or to comply with the law.

To provide the service we rely on:

• YouTube / Google: to perform the actions you authorize on your account.
• Groq: processes the title/description text you submit when you use an AI suggestion feature.
• Vercel (hosting) and Neon (database): store and serve the application and your data.

Data is stored in a managed PostgreSQL database and served over HTTPS with a strict Content-Security-Policy. OAuth tokens for your connected accounts are encrypted at rest with AES-256-GCM. Sessions use signed, HTTP-only cookies. No method of storage is perfectly secure, but we apply reasonable security safeguards as required by the DPDP Act and take them seriously.

If a personal data breach affects you, we will notify you and the Data Protection Board of India in the form and manner required by the DPDP Act and its rules.

International transfers:our hosting (Vercel) and database (Neon) process and store data on servers that may be located outside India, including in the United States. We transfer data only to territories permitted under the DPDP Act; where other laws (such as the EU/UK GDPR) require it, transfers rely on appropriate safeguards such as the processors’ Standard Contractual Clauses.

• You can disconnect any platform at any time in Settings, which deletes the stored tokens for that account.
• You can permanently delete your account and all associated data yourself at any time from Settings → Danger Zone. This removes your records and revokes Kontire’s access to your connected accounts. You can also request deletion by emailing us.
• Download your data: you can export everything we hold about you as a JSON file at any time from Settings → Your data.
• We retain your data only while your account is active or as required by law. When you delete your account it is removed promptly; backups, if any, are overwritten on their normal cycle.
• You may also revoke Kontire’s access directly from your Google Account permissions page.

If you are in India, the DPDP Act gives you the following rights as a data principal — most can be exercised directly in the app, or by contacting us:

• Access: a summary of the personal data we process and how (this policy, plus Settings → Your data).
• Correction & erasure: update your content and account details, or delete your account and all data (Settings → Danger Zone).
• Withdraw consent: disconnect a platform or revoke access at any time, as easily as you gave it.
• Grievance redressal: raise a complaint with our grievance officer (below) and, if unresolved, complain to the Data Protection Board of India.
• Nomination: nominate another person to exercise your rights in the event of death or incapacity — email us to record a nominee.

You have a corresponding duty not to impersonate another person or file false or frivolous complaints. If you are in the EU/UK or California, you have equivalent rights under the GDPR / UK GDPR and CCPA/CPRA (we do not “sell” or “share” personal information, and will never discriminate against you for exercising a right) — including the right to object, restrict processing, data portability, and to lodge a complaint with your local supervisory authority.

In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act, 2023, the contact for grievances is:

• Grievance Officer: Tejasv (Founder)
• Email: tejasvextras@gmail.com

We acknowledge grievances within 24 hours and resolve them within 15 days of receipt (and sooner where the law requires a shorter timeline).

We use a single first-party, HTTP-only session cookie to keep you signed in — it is strictly necessary for the service to work. We do not use third-party tracking or advertising cookies, and we do not run analytics trackers on your browsing.

Kontire is intended for users who are 18 or older. Under the DPDP Act, users below 18 are children and may use Kontire only with verifiable parental consent; we do not knowingly collect a child’s data, track or profile children, or direct advertising at them. If you believe a child has created an account, contact us and we will delete it.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above, and — where required — notified to you in the app or by email.

Questions, rights requests, or deletion requests: tejasvextras@gmail.com.