Get My Free Growth Plan

Privacy Policy

Last updated: 31 March 2026

What This App Does

Kāhu Studio operates an automated content management tool used exclusively for our own business social media accounts. It helps us plan, create, publish, and analyse content across Instagram, Facebook, and Threads. This is a single-business tool — it does not serve external users or access other people's accounts.

Data We Access

Through Meta's APIs, we access data from our own accounts only:

  • Post performance metrics — likes, comments, views, reach, and impressions (via Instagram Insights API)
  • Account follower counts and engagement rates
  • Published content metadata — captions, timestamps, and media URLs

Separately, we collect publicly available data from competitor and inspiration accounts using Apify (a web scraping service, not a Meta API). This includes public post captions, like/comment counts, media URLs, follower counts, and bios. We do not access private data, DMs, saved content, or shared metrics from any account.

How We Use Your Data

  • Content performance analysis and scoring— we review what's working and what isn't across our own posts
  • AI-powered content ideation — we use performance data to generate ideas for future content
  • Automated publishing — scheduling and posting content to our own accounts
  • Performance tracking feedback loop — published content feeds back into analysis to continuously improve results

All data is used for our own business content strategy. We do not sell data, share it with third parties for their own purposes, use it for advertising or profiling, or provide it to data brokers.

Data Storage & Security

Data is stored across these systems:

  • Google Sheets — structured performance data in private spreadsheets (not shared publicly)
  • Qdrant vector database — self-hosted, used for content embeddings and similarity search
  • Google Cloud Storage — media files accessed via signed URLs that expire after 1 hour
  • n8n automation server — self-hosted on a private VPS (Hostinger)

All connections use encrypted HTTPS. Infrastructure is self-hosted or in private cloud environments with no public access. No data is stored on third-party analytics platforms.

Third-Party Services

Some data is processed by third-party AI services for analysis and content generation:

  • Google Gemini — content analysis and ideation
  • Anthropic Claude — feedback analysis
  • OpenAI — text embeddings only
  • Apify — public web scraping (not Meta API data)

All AI providers are used via their API terms, which means they do not retain or use our data for model training. No consumer-tier accounts are used for data processing.

Data Retention

  • Qdrant vectors — pruned after 90 days
  • Google Sheets data — retained indefinitely as business performance records
  • Google Cloud Storage media URLs — signed URLs expire after 1 hour; files are retained for publishing reference

Data Deletion

If you believe any of your data has been collected and want it removed, email us at hello@kahustudio.co.nz. We will:

  • Confirm what data we hold (if any)
  • Delete it from all systems listed above
  • Confirm deletion within 30 days of your request

For Meta-specific data deletion callbacks, we support the Data Deletion Request Callback as required by Meta Platform Terms.

Your Rights

Kāhu Studio is based in New Zealand. We comply with the New Zealand Privacy Act 2020 and its 13 Information Privacy Principles. Under this law, you have the right to:

  • Know whether we hold personal information about you
  • Access that information
  • Request correction of inaccurate information
  • Request deletion of your information

To exercise any of these rights, contact us using the details below.

Changes to This Policy

We may update this policy as our tools and data practices evolve. Changes will be posted on this page and take effect immediately.

Contact

If you have questions about this privacy policy or how we handle data: