Privacy Policy

Effective Date: February 2026

KodaPost (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our carousel creation service.

1. Information We Collect

Images You Upload

When you upload photos, they are stored temporarily in your browser’s local memory for carousel generation. Images are sent to our Koda processing pipeline solely for the purpose of creating your carousel slides. We do not permanently store your uploaded images on our servers.

Configuration Preferences

Your carousel settings (theme, camera style, filter selections, text overlays, and slide configurations) are saved in your browser’s local storage to enable auto-save functionality. This data never leaves your device unless you initiate carousel generation.

Social Media OAuth Tokens

If you connect social media accounts for publishing, we store encrypted OAuth access tokens in secure, HTTP-only cookies. These tokens are used exclusively to publish carousels on your behalf and are never shared with third parties.

Theme Preference

We store your light/dark mode preference in local storage to provide a consistent visual experience across sessions.

2. How We Use Your Information

Carousel Generation: Your images and configuration are processed through our Koda pipeline to create carousel slides with applied filters, text overlays, and camera emulation effects.
Publishing: When you choose to publish, we use your stored OAuth tokens to post carousels to your connected social media platforms.
Auto-Save: Project state is saved locally in your browser to prevent work loss.

3. Third-Party Services

We use the following third-party services during carousel generation:

Anthropic (Claude): For image analysis, text overlay generation, and caption creation. Images are sent to Anthropic’s API for processing and are subject to Anthropic’s Privacy Policy.
Social Media Platforms: When publishing, carousel images are transmitted to the respective platform (Instagram, TikTok, LinkedIn, YouTube, X/Twitter, or Reddit) via their official APIs.

4. Data Storage and Retention

Browser Local Storage: Project data, settings, and preferences are stored locally on your device. We have no access to this data.
OAuth Cookies: Encrypted tokens are stored as HTTP-only cookies and expire according to each platform’s token lifetime policy.
Server-Side: We do not maintain a database of user data. Images and project configurations are processed in-memory during generation and are not retained afterward.

5. Cookies

We use only essential cookies required for the service to function:

OAuth Token Cookies: Encrypted social media access tokens for publishing functionality.
Theme Preference: Your selected light/dark mode preference.

We do not use advertising cookies, tracking cookies, or analytics cookies.

6. Your Rights

Delete Your Data: You can delete all locally stored data at any time by clearing your browser storage or starting a new project.
Disconnect Accounts: You can disconnect any social media account at any time through the Settings dialog, which immediately removes the stored OAuth token.
Data Portability: Your carousel images can be exported at any time as a downloadable ZIP file.

7. Data Security

We implement appropriate security measures to protect your information:

OAuth tokens are encrypted before storage in cookies.
All communication with third-party APIs uses HTTPS encryption.
No sensitive data is stored in server-side databases.

8. Children’s Privacy

KodaPost is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the “Effective Date” at the top of this page.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@kodapost.app.