Kip

Privacy Policy

Effective 10 September 2026 · Pulse Social Media (“Pulse”, “we”, “us”) · Product: Kip

Kip is an SMS-first organic social agent. You text photos and instructions; Kip drafts captions, schedules posts, and publishes to the destinations you connect — after you approve in the thread, unless you turn on autopilot. This policy explains what we collect, why, who helps us process it, and how you can access or delete it.

Who this covers

Brand owners and operators who create a Kip account, connect social destinations, text the service number, or use the web dashboard. If you are in Australia, the Australian Privacy Principles apply. If you are in the EEA/UK, we process personal data as described below; contact us for a DPA if you need one for your organisation.

What we collect

• Account & contact: name, mobile number, and any email you give us. SMS one-time codes sign you in.
• Brand profile: brand name, handle notes, tone preferences, and editable memory files (for example memory.md) you or an operator save.
• Messages & media: SMS/MMS text, photos, and videos you send so Kip can draft and publish; our replies in the same thread.
• Drafts, plans & calendar: captions, scheduled times, content plans, routines, and approval / reject history.
• Platform connections: OAuth tokens and account identifiers for Instagram, Facebook Pages, X, and Threads you connect, stored encrypted and used only to publish or read metrics you request.
• Engagement data: likes, comments, reach and similar metrics from platform APIs for check-ins and recaps.
• Billing: plan (Pro / Max), billing period, and payment status via Stripe — we do not store full card numbers. Stripe sends receipts and failed-payment emails to the address collected at checkout.
• Operator access: when Pulse staff or a named operator helps set up your brand, their actions on your workspace may be logged (who approved, edited, or connected accounts).
• Technical logs: basic server logs (IP, timestamps, error codes) needed to run and secure the service.

How we use it

• Draft captions and replies in your voice from the media and memory you provide.
• Send and receive SMS/MMS on the Kip number.
• Publish approved (or autopilot-authorised) organic posts to connected destinations.
• Run routines you configure (weekly check-in, Friday recap, quiet reminders).
• Show calendar, plan, connections, and memory in the dashboard.
• Bill your plan, prevent abuse, and keep an audit trail of approvals and publishes.

We do not sell your personal data or content. We do not use your photos, captions, or memory files to train our own models, and we contract with AI providers on terms that restrict training on your content where those options exist.

Legal bases (where GDPR applies)

Contract (providing Kip), legitimate interests (security, product improvement that does not require training on your content, fraud prevention), and consent where required (optional marketing messages — separate from transactional SMS).

Processors & destinations

We use subprocessors only to deliver Kip:

• Twilio — SMS/MMS delivery and inbound media.
• Meta Platforms — Instagram, Facebook, and Threads OAuth and publishing via Graph APIs.
• X Corp. — X OAuth and publishing.
• Anthropic (and similar LLM providers we may add) — drafting captions and summaries from the media and notes you supply.
• Neon — Postgres database and encrypted media storage.
• Vercel / Railway (or equivalent host) — application hosting.
• Stripe — subscriptions, invoices, and card processing for Pro / Max.

Each processes data only as needed for its function. Platform posts you approve also become subject to that platform’s terms and audience.

Retention & security

We keep account, message, media, draft, and approval data while your account is active and for a reasonable period after (or until you request deletion) so we can support reporting and disputes. OAuth tokens are encrypted at rest (AES-256-GCM) and decrypted only server-side at use. Traffic uses TLS. Access to operator tools is limited to authorised Pulse staff. Brands are isolated from each other in the product data model.

Your choices

• Approve or reject every post in the thread (default), or enable autopilot yourself.
• Disconnect Instagram, Facebook, X, or Threads anytime in Connections or via the platform’s business integrations settings.
• Edit or clear memory files.
• Request access, correction, export, or deletion — see Data deletion or email will@jmcalder.com.
• Text STOP to pause SMS (transactional notices required by law may still apply).

Children

Kip is for businesses and creators 18+. We do not knowingly collect data from children.

Changes

We will update this page when practices change and revise the effective date. Material changes may also be noted in-product or by email/SMS.

Contact

Pulse Social Media
Email: will@jmcalder.com