Khula Privacy Policy

1. Introduction

Welcome to Khula. This Privacy Policy explains how Khula Technologies Limited ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you visit our website or use our application.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect includes:

• Personal Data: Personally identifiable information, such as your name, email address, and telephone number, that you voluntarily give to us when you register with the Site.
• Derivative Data: Information our servers automatically collect when you access the Site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Site.
• Google User Data: When you choose to connect a YouTube channel, Google asks for your consent and then provides us with data from your Google Account. We collect only what the service needs: your Google account email address and basic profile information, your YouTube channel identifier, name, and thumbnail, metadata for videos you schedule or publish through Khula (such as title, description, tags, thumbnail, visibility, and publish time), performance metrics for those videos (such as views, watch time, and subscriber changes), and the OAuth access and refresh tokens that authorise these actions.

Connecting a YouTube channel is entirely optional, and you may use the rest of Khula without it. We request Google user data only through Google's official OAuth consent screen, and only for the scopes shown to you there.

3. Use of Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you to:

• Create and manage your account.
• Deliver targeted advertising, coupons, newsletters, and other information regarding promotions and the Site to you.
• Email you regarding your account or order.
• Fulfill and manage purchases, orders, payments, and other transactions related to the Site.

Google user data obtained through a connected YouTube channel is used only to deliver the features you asked for:

• Verify which YouTube channel you are connecting and display it in your Khula workspace.
• Upload, schedule, and publish the videos you create or queue in Khula, using the metadata you provide.
• Show you the performance of content published through Khula in your analytics dashboard.
• Keep your connection active by refreshing expired access tokens, and notify you if the connection fails or needs to be re-authorised.

We do not use Google user data for advertising, and we do not use it to train generalised artificial intelligence or machine learning models.

4. Disclosure of Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

• By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others.
• Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf.

This section does not apply to Google user data, which is subject to the narrower commitments described in Section 7.

5. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable.

6. Retention and Deletion of Google User Data

Khula retains Google user data only for as long as necessary to provide the scheduling and publishing service. OAuth access and refresh tokens for connected YouTube channels are stored encrypted and are retained only while the channel remains connected to a Khula workspace.

Users may disconnect a YouTube channel at any time from within their Khula workspace. On disconnection, all associated tokens and channel data are permanently deleted from our systems within 30 days.

If a user deletes their Khula account, all Google user data associated with that account, including tokens, channel information, and scheduled content, is permanently deleted within 30 days.

Users may also revoke Khula's access directly via their Google Account permissions page at https://myaccount.google.com/permissions.

7. Google API Services Limited Use Disclosure

Khula's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we do not:

• Transfer or sell Google user data to third parties, except as necessary to provide or improve the service, to comply with applicable law, or as part of a merger or acquisition in which the receiving party is bound by this policy.
• Use Google user data to serve advertisements, including retargeted, personalised, or interest-based advertising.
• Allow humans to read Google user data, unless we have your explicit consent for specific messages, it is necessary for security purposes such as investigating abuse, it is required to comply with applicable law, or the data has been aggregated and anonymised for internal operations.

Your YouTube data is also governed by the YouTube Terms of Service and the Google Privacy Policy.

8. Other Platform Integrations

Khula also integrates with other social media platforms, including Facebook, Instagram, TikTok, LinkedIn, and Twitter/X. Connecting any of these accounts is optional, and each connection is authorised by you through that platform's own permission screen.

For each connected account, we collect the account or page identifier, basic profile information such as your display name and profile image, metadata for the content you schedule or publish through Khula, performance metrics for that content, and the access and refresh tokens that authorise these actions. We use this data only to publish the content you queue, to display your connected accounts, and to show you performance in your analytics dashboard. We do not use it for advertising, and we do not use it to train generalised artificial intelligence or machine learning models.

The retention terms in Section 6 apply equally to these platforms. Tokens are stored encrypted and retained only while the account remains connected to a Khula workspace. When you disconnect an account, or delete your Khula account, all associated tokens, account information, and scheduled content are permanently deleted from our systems within 30 days. You may also revoke Khula's access at any time from the connected apps or permissions settings of the platform itself.

Each platform's own handling of your data is governed by its privacy policy, not by this one. Khula is not affiliated with, endorsed by, or sponsored by any of these platforms.

9. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at support@khula.app.