Last updated · October 13, 2026
Kilto is a customer-relationship and marketing platform that helps businesses manage their contacts, content, and social-media presence from one workspace. This Privacy Policy explains what personal data we collect, how we use it, and the choices you have. It applies to our website, applications, and the connected-account integrations we offer (including Instagram).
We collect the following categories of information:
Our mobile apps request the following device permissions. Each one is optional, is requested only when you first use the feature that needs it, and can be revoked at any time in your device settings. The app stays usable without it, with the related feature disabled.
On an iPhone, the Kilto app also asks once, shortly after it is first opened, whether it may track you. Your answer decides only whether the device's advertising identifier is used to measure our ads (see Measuring our app-install ads).
This data belongs to the workspace (your employer, or the organisation that invited you) and is visible to that workspace's administrators. It is never sold, and it is never used for advertising or ad profiling.
The core of the service is the record a business keeps about its own clients. When you use the agenda or the billing features we store, on behalf of your workspace:
This information belongs to the workspace that entered it, not to us. We use it only to provide the service to that workspace, never to build advertising profiles, and never for sale. If your business records anything sensitive in a free-text note, it is treated with the same confidentiality as the rest of the workspace's data.
Some features of Kilto use artificial intelligence provided by other companies, which process the data on our behalf to return the result:
This data belongs to the workspace, as described above. We never use it for advertising and never sell it.
We use personal data to provide and improve the service, specifically to: operate your workspace and authenticate you; publish the content you schedule; show you analytics about your own accounts and posts; deliver the messaging and comment-management features you enable; provide support; keep the platform secure and prevent abuse; and comply with our legal obligations. In the Kilto mobile app we also measure which of our own ads led people to install it (see Measuring our app-install ads). We do not sell your personal data, and we do not use the data obtained from Meta's APIs for advertising or to build profiles unrelated to the features you use.
When you connect an Instagram account, you grant Kilto access through Meta's official Instagram and Graph APIs. We request only the permissions needed for the features you use: reading your basic profile, publishing content on your behalf, reading insights, and (optionally) managing messages and comments.
Our use of information received from Meta's APIs adheres to the Meta Platform Terms and Developer Policies, including their limited-use requirements. We use this data solely to provide the features you enabled, never to sell it, and never to transfer it to data brokers or for advertising networks. You can revoke our access at any time (see Data deletion), and you may also remove Kilto from your Instagram settings under Apps and websites.
The Kilto mobile app includes Meta's software development kit (SDK) so that we can measure which of our own ads led people to install and open the app. When the app is installed, and each time it is opened and closed, the SDK sends Meta that event and how long the app was open, basic technical information about the device (such as its model, operating system and language), an identifier the SDK creates for that installation and the device's advertising identifier. On Android it also sends the Google Play install referrer, which tells Meta which ad or link led to the install, and, when the Facebook or Messenger app is installed on the phone, the identifier that app provides. Like any request over the internet, these reach Meta together with the device's IP address. On an iPhone running iOS 14 or later, the advertising identifier is sent only if you choose to allow tracking when the app asks; on older versions it is sent unless Limit Ad Tracking is turned on. Nothing you or your workspace enter in the app is sent to Meta.
Meta processes these data under its own Privacy Policy. You can stop the advertising identifier being sent at any time: on an iPhone, turn tracking off for the app (Settings › Privacy & Security › Tracking); on Android, delete or reset your advertising ID (Settings › Privacy › Ads, or Settings › Google › Ads). The install and app-open events are still counted without it; uninstalling the app stops them.
We keep personal data for as long as your account is active or as needed to provide the service. When you disconnect a social account, we stop syncing new data from it and delete the stored access tokens. When you delete your workspace, or upon a verified deletion request, we delete or anonymize the associated personal data within 90 days, except where we must retain it to meet legal obligations.
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can manage much of this directly in the product, or contact us at privacy@kilto.app and we will respond in line with applicable law.
You can delete your data at any time:
We protect personal data with encryption in transit, encrypted storage of access tokens, access controls, and tenant isolation so that each workspace's data is kept separate. No method of transmission or storage is perfectly secure, but we work to safeguard your information and to respond quickly to any incident.
We may process and store data in countries other than your own. When we transfer personal data across borders, we use appropriate safeguards as required by applicable law.
The service is intended for businesses and is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children.
We may update this Privacy Policy from time to time. When we make material changes, we will update the date below and, where appropriate, notify you. Continued use of the service after an update means you accept the revised policy.
For any privacy question or request, contact us at privacy@kilto.app.