1. Introduction

Kaziflex Technologies (“we,” “us,” or “our”) operates Social Flex (the “Service”). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.

By using Social Flex, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

Account Information: Email address, full name, company name (optional), password (encrypted)
Billing Information: Payment method details (processed by Stripe, not stored by us)
API Usage Data: Instagram post URLs you submit for scraping
Communications: Messages you send us via email or support channels

2.2 Information Automatically Collected

Usage Data: API requests, endpoints accessed, response times, timestamps
Device Information: IP address, browser type, operating system
Cookies: Session cookies, authentication tokens (see Cookie Policy below)
Log Data: Error logs, performance metrics, debugging information

2.3 Information from Third Parties

Stripe: Payment confirmation, subscription status, billing events
Instagram: Public data you request through our API (we do not access your personal Instagram account)

3. How We Use Your Information

We use your information to:

Provide the Service: Process API requests, deliver scraped data, manage your account
Billing: Process payments, send invoices, manage subscriptions
Communications: Send transactional emails (verification, password resets, billing updates)
Improve the Service: Analyze usage patterns, fix bugs, develop new features
Security: Detect fraud, prevent abuse, ensure platform security
Compliance: Meet legal obligations, enforce our Terms of Service
Analytics: Generate aggregate statistics (anonymized) about Service usage

We do NOT sell your personal information to third parties.

4. Data Sharing and Disclosure

We may share your information with:

4.1 Service Providers

Stripe: Payment processing (see Stripe's privacy policy)
AWS: Data storage and hosting
Sentry: Error tracking and monitoring
Resend: Transactional email delivery

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to:

Comply with legal processes
Enforce our Terms of Service
Protect our rights, property, or safety
Investigate fraud or security issues

4.3 Business Transfers

If we are acquired, merge with another company, or sell assets, your information may be transferred to the new entity. You will be notified of such changes.

5. Data Security

We implement industry-standard security measures to protect your information:

Encryption: HTTPS/TLS for data in transit, bcrypt for passwords
Access Controls: Role-based permissions, API key authentication
Infrastructure: Secure cloud hosting (AWS), regular backups
Monitoring: Automated error tracking, security alerts
Compliance: PCI DSS compliance via Stripe for payment data

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide the Service:

Account Data: Retained while your account is active, plus 90 days after deletion
Usage Logs: Retained for 6 months for analytics and troubleshooting
Scraped Data: Stored for 30 days, then deleted (unless you download it)
Billing Records: Retained for 7 years for tax/accounting purposes
Legal Holds: Retained longer if required by law or pending litigation

7. Your Rights

Depending on your location, you may have the following rights:

7.1 GDPR Rights (EU/EEA/UK)

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data (“right to be forgotten”)
Restriction: Limit how we process your data
Portability: Receive your data in a machine-readable format
Object: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent for data processing

7.2 CCPA Rights (California)

Know: Request disclosure of data collected, used, and shared
Delete: Request deletion of personal information
Opt-Out: Opt out of sale of personal information (we do not sell data)
Non-Discrimination: Not be discriminated against for exercising rights

7.3 How to Exercise Your Rights

To exercise any of these rights, contact us with:

Your name and email address associated with your account
The specific right you wish to exercise
Any additional information needed to verify your identity

We will respond to verified requests within 30 days (45 days for complex requests).

8. Cookies and Tracking

We use cookies and similar technologies to:

Essential Cookies: Authentication, session management (required for the Service to work)
Analytics Cookies: Usage statistics, performance monitoring (can be disabled)
Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling essential cookies may limit Service functionality.

9. Children's Privacy

The Service is not intended for users under 18 years old. We do not knowingly collect information from children. If you believe we have collected data from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

We use appropriate safeguards (Standard Contractual Clauses, Privacy Shield where applicable) to protect your information during international transfers.

11. Do Not Track

Our Service does not respond to Do Not Track (DNT) signals. We track usage for essential Service operations and analytics as described in this Privacy Policy.

12. Third-Party Links

The Service may contain links to third-party websites (Instagram, Stripe, etc.). This Privacy Policy does not apply to those sites. We recommend reviewing their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via:

Email to your registered address
Prominent notice on the Service
Updated “Last Updated” date at the top

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us.