Privacy Policy
Last updated: February 2026
BKK AI Lab ("we", "us", or "our") operates the website bkkailab.com and provides AI-powered automation services for social media management. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
1. Information We Collect
We collect information you provide directly to us, including:
- Account Information: Name, email address, company name, and password when you create an account
- Social Media Data: When you connect your social media accounts (Instagram, Facebook), we access your posts, comments, messages, follower counts, and engagement metrics to provide our automation services
- Content Data: Posts, captions, images, and other content you create or schedule through our platform
- Communication Data: Messages and feedback you send to us
- Usage Data: Information about how you interact with our services, including pages visited and features used
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our AI automation services
- Schedule and publish content to your connected social media accounts
- Analyze comments and generate AI-powered responses on your behalf
- Generate analytics reports and insights about your social media performance
- Process and manage your subscription and payments
- Communicate with you about updates, features, and support
- Improve our AI models and service quality
- Detect and prevent fraud or abuse
3. Third-Party Services
We use the following third-party services to operate our platform:
Meta/Facebook API
We use Meta's Graph API to connect to your Instagram and Facebook accounts, fetch your posts and comments, publish content, and manage interactions. Your social media data is processed according to Meta's Platform Terms and Data Policy. We only access data you explicitly authorize.
OpenAI
We use OpenAI's API to power our AI features, including content generation, comment analysis, and automated responses. Your content may be processed by OpenAI's models. OpenAI does not use API data to train their models. See OpenAI's privacy policy for more details.
Supabase
We use Supabase as our database and authentication provider. Your account data, content, and analytics are securely stored on Supabase's infrastructure. Supabase employs industry-standard security measures and encryption.
Clerk
We use Clerk for user authentication and session management. Clerk handles your login credentials securely and provides features like multi-factor authentication.
4. Data Storage and Security
We implement appropriate technical and organizational security measures to protect your personal information:
- All data is encrypted in transit using TLS/SSL
- Database encryption at rest
- Access tokens are securely stored and encrypted
- Regular security audits and monitoring
- Limited employee access to personal data on a need-to-know basis
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. We retain analytics and performance data for up to 24 months to provide historical insights. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or compliance purposes.
6. Cookies and Tracking
We use cookies and similar tracking technologies to:
- Essential Cookies: Required for authentication and core functionality
- Analytics Cookies: Help us understand how visitors interact with our website
- Preference Cookies: Remember your settings and preferences
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our services.
7. Your Rights
You have the following rights regarding your personal information:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Correction: Request correction of inaccurate or incomplete data
- Right to Deletion: Request deletion of your personal data (subject to legal retention requirements)
- Right to Data Portability: Request your data in a machine-readable format
- Right to Withdraw Consent: Withdraw consent for data processing at any time
- Right to Object: Object to processing of your data for certain purposes
To exercise any of these rights, please contact us at info@bkkailab.com. We will respond to your request within 30 days.
8. Information Sharing
We do not sell your personal information. We may share your information only in the following circumstances:
- With third-party service providers who assist us in operating our platform (as described in Section 3)
- To comply with legal obligations or respond to lawful requests
- To protect our rights, privacy, safety, or property
- In connection with a merger, acquisition, or sale of assets (with notice to you)
- With your explicit consent
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.
10. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page, updating the "last updated" date, and sending you an email notification if required by law. Your continued use of our services after changes become effective constitutes acceptance of the revised policy.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at: