Data Policy
Effective Date: February 2026
This Data Policy explains how KodaPost handles your data, protects your uploaded images, and ensures your personal information remains private. We are committed to transparency about our data practices.
1. Image Ownership
You retain full and exclusive ownership of all images you upload to KodaPost. We do not claim any rights, title, or interest in your original photographs. Your images remain your intellectual property at all times.
Carousels generated using your images are also owned by you. KodaPost does not claim any license over the finished carousels you create, whether they include Koda-generated text overlays, filters, or camera emulation effects.
2. How Images Are Processed
- In-Browser Storage: Uploaded images are stored in your browser’s memory during your session. When saved to local storage for auto-save, image data is stripped to stay within browser storage limits.
- Koda Processing: During carousel generation, your images are sent to our Koda processing pipeline (powered by Anthropic Claude) for analysis, filter application, and text overlay generation. Images are processed in-memory and are not permanently stored on our servers.
- Export and Publishing: When you export or publish your carousel, the final composite images are generated server-side using Sharp image processing. These generated images are provided to you for download or transmitted to your connected social media platforms. They are not retained by KodaPost after delivery.
3. Personal Information Protection
KodaPost is designed with a privacy-first architecture:
- No PII Extraction: We do not extract, analyze, or store personally identifiable information (PII) from your uploaded images. Our Koda processing focuses solely on visual composition, mood, and content for carousel generation purposes.
- No Face Recognition: We do not perform facial recognition, face detection, or biometric analysis on uploaded images.
- No User Profiles: We do not build user profiles, behavioral models, or tracking dossiers based on your usage of the service.
- No Data Selling: We never sell, rent, or trade your data, images, or any information derived from them to third parties.
4. Data Retention
| Data Type | Storage Location | Retention Period |
|---|---|---|
| Project configuration | Browser localStorage | Until you clear it or start a new project |
| Uploaded images | Browser memory (session only) | Current browser session only |
| OAuth tokens | Encrypted HTTP-only cookies | Until token expiration or disconnection |
| Theme preference | Browser localStorage | Until you change it or clear storage |
| Server-side image data | Not stored | Processed in-memory only, not retained |
5. Right to Deletion
You can delete all your data at any time through these methods:
- New Project: Starting a new project clears your previous carousel data from local storage.
- Browser Storage: Clear your browser’s local storage and cookies to remove all KodaPost data from your device.
- Disconnect Accounts: Use the Settings dialog to disconnect social media accounts, which immediately deletes stored OAuth tokens.
Because we do not store your data on our servers, deletion is immediate and complete.
6. Data Sharing
Your images and data are never shared with third parties except in the following limited circumstances:
- Koda Processing: Images are sent to Anthropic’s API for carousel generation processing, governed by their data handling policies.
- Publishing: When you explicitly choose to publish, your carousel images and caption are transmitted to the social media platforms you select.
In both cases, data is shared only when you initiate the action, and only the minimum necessary data is transmitted.
7. Security Measures
- All data transmission uses HTTPS/TLS encryption.
- OAuth tokens are encrypted at rest using AES-256-GCM encryption.
- No server-side database means no risk of centralized data breaches.
- HTTP-only cookies prevent client-side JavaScript from accessing OAuth tokens.
8. Changes to This Policy
We may update this Data Policy to reflect changes in our practices or for legal compliance. We will notify users by updating the “Effective Date” at the top of this page.
9. Contact Us
If you have questions about this Data Policy or our data practices, please contact us at privacy@kodapost.app.