Privacy Policy

1. Who we are

Ktistis Labs creates and runs a small number of social media accounts, including digital creator accounts made with artificial intelligence, which are labeled as such. We publish to these accounts with our own private publishing service. The service is not offered to the public.

2. This website

This website has no forms, analytics, advertising or tracking cookies. Our hosting provider keeps standard technical logs (such as IP address and browser type) for security, for a short period.

3. Information from connected accounts

An account is connected only when its owner, or a person the owner authorizes, signs in on Facebook's or Instagram's own consent screen and approves the requested permissions. We then receive and keep only:

• Account identity: the Facebook Page or Instagram professional account ID, username and name, so the right account is selected.
• Access credentials: the access tokens Meta issues, the permissions granted and their expiry dates.
• Publishing records: the ID, link and status of each post we publish.

4. Comments on our posts

When someone comments on, or mentions, a post on an account we manage, Meta sends us that event. We receive the comment ID, its text, the commenter's public username and ID, and the time. We use it only to read the comment and to reply to it from the account, either automatically or after a person reviews it.

We keep comment data for up to 90 days, then delete it, except comments needed to handle abuse or a legal matter. We do not build profiles of commenters, contact them outside the comment thread, or sell or share their data.

5. How we use and protect this information

• We use it only to publish approved content to the chosen account, to confirm it was published, to read and reply to comments, and to keep the connection working.
• We do not sell it, use it for advertising, or use it to train artificial intelligence or machine learning models.
• We share it only with Meta when publishing or replying, with infrastructure providers that host our systems under confidentiality obligations, or when the law requires it.
• Access tokens are encrypted at rest (AES-256-GCM) on a server we control. They are never shown in a browser, sent by email or written to logs.

6. Disconnecting and deleting data

You can remove our app at any time in your Facebook or Instagram settings, or ask us to delete your data. Instructions are on our Data Deletion page (https://ktistis.com/data-deletion).

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or move your information, or to object to how we use it. Write to privacy@ktistis.com and we will answer within the time the law requires. You may also complain to your local data-protection authority.

8. Children

Our services are not directed at children under 13, and we do not knowingly collect their information. If you believe a child has sent us information, contact us and we will delete it.

9. Changes and contact

We will update the effective date above when this policy changes. Questions: privacy@ktistis.com, or Kallos Labs LLC, operating as Ktistis Labs, 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, USA.