Trust center

Privacy Policy

This policy explains what hkly collects when you connect a creator account, why we use it, and how you can remove it.

Last updated: 6 August 2026

Information we collect

When you create an hkly account, we collect account information such as your name, email address, phone number, and authentication records.

When you connect Instagram or YouTube, we receive the profile, content, audience, and performance information permitted by the scopes shown in the platform authorization screen. This can include account identifiers, profile details, published media metadata, reach, views, engagement, and related insights.

OAuth access tokens are encrypted at rest and are never exposed to the browser after the provider connection completes.

How we use information

  • To connect and synchronize creator accounts.
  • To calculate creator analytics, comparisons, performance tags, insights, recommendations, and daily briefs.
  • To secure, support, debug, and improve hkly.
  • To comply with legal and platform requirements.

Sharing and service providers

We use infrastructure and service providers to operate hkly, such as hosting, databases, object storage, email delivery, observability, and configured AI providers. They receive only the information required to provide their service under applicable contractual and security controls.

We do not sell connected creator-account data.

Retention and deletion

Connected-platform data is retained while needed to provide hkly and maintain historical comparisons. Disconnecting a platform stops future synchronization. You can request deletion at any time from the data deletion page.

Provider-initiated deletion or deauthorization requests remove the associated OAuth token, connected account, raw platform payloads, provider mirror records, normalized platform records, and derived intelligence that may contain evidence from that platform.

Security

We use access controls, encrypted credentials, scoped provider permissions, audit logging, and environment-separated configuration. No internet service can guarantee absolute security, but we work to prevent unauthorized access, disclosure, alteration, and loss.

Your choices

You may disconnect a provider, request data deletion, or ask for help by emailing support@hkly.ai. Depending on your location, additional access, correction, portability, objection, or restriction rights may apply.