Privacy Policy

1. Who We Are

KalosMedia is operated by Charles Smith ("we," "us," or "our"). This Privacy Policy explains what information we collect when you use KalosMedia, how we use it, and the choices you have. Questions can be sent to accounts@kalosmedia.com.

2. Information We Collect

Account information. Your email address, optional display name, and a hashed password. We use PBKDF2 with a unique per-user salt to hash passwords — we never store your password in plain text and cannot recover it.

Content you upload. The video files you upload, along with titles, descriptions, tags, and scheduling details you provide for them.

Connected platform credentials. When you connect a third-party platform (such as YouTube), we store the OAuth access and refresh tokens issued by that platform, encrypted at rest using AES-256-GCM with a server-side encryption key. We use these tokens only to perform the uploads and analytics lookups you request.

Analytics data. Performance metrics (such as views, likes, comments, shares, and watch time) that connected platforms report back for content you've published through KalosMedia.

Usage and security logs. We keep an audit log of account and administrative activity (such as logins, uploads, and settings changes), which includes your IP address, browser user agent, the action taken, and a timestamp. This is used for security monitoring, abuse prevention, and troubleshooting.

Cookies and local storage. See Section 6 below for the specific cookies and browser storage KalosMedia uses.

3. How We Use Your Information

• To provide the core service: storing your videos and publishing them to platforms you connect;
• To authenticate you and secure your account;
• To send you transactional email, such as email verification and password reset messages;
• To monitor for abuse, enforce our Terms of Service, and maintain the security of the platform;
• To display usage statistics and analytics back to you within the product.

We do not sell your personal information, and we do not use Your Content to train any model.

4. Third-Party Service Providers

We rely on a small number of third-party providers to operate KalosMedia:

• Amazon Web Services (AWS) — hosts the application server and stores uploaded video files;
• Neon — hosts our Postgres database, where account, content metadata, and log data is stored;
• Resend — delivers transactional email (email verification and password reset messages);
• Google (YouTube Data API / YouTube Analytics API) — used when you connect a YouTube account, as described in Section 5;
• Additional platform APIs (e.g. TikTok, Twitter/X) as those integrations become available, subject to updates to this Policy.

Each provider only receives the data necessary to perform its function and is not authorized to use your data for its own purposes beyond that.

5. Google API Services Disclosure

KalosMedia's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

KalosMedia uses the YouTube API Services. By connecting a YouTube account, you agree to be bound by the YouTube Terms of Service and acknowledge the Google Privacy Policy. You can revoke KalosMedia's access to your Google account at any time via the Google security settings page.

6. Cookies and Local Storage

KalosMedia uses a small number of cookies and browser storage items — no third-party advertising or tracking cookies:

• Session token (browser local storage) — keeps you signed in; cleared when you log out.
• Site access cookie — used during this site's current private-testing phase to gate access with a shared password.
• OAuth state cookie — a short-lived (10-minute) cookie used only during the connect-platform flow, to verify the request wasn't forged.
• Theme preference (browser local storage) — remembers whether you prefer light or dark mode.

7. Data Retention

We retain your account information and content for as long as your account is active. If you request account deletion (Section 8), we delete your account record, uploaded video files, connected-platform credentials, and associated content metadata within a reasonable period. Security and audit logs may be retained for a longer period as needed for security and legal compliance purposes, with personal identifiers removed where feasible.

8. Your Choices and Rights

• Access and correction — you can update your name and password from your account settings at any time.
• Disconnecting platforms — you can disconnect a connected platform from KalosMedia at any time, which deletes the stored credentials for it.
• Deletion — email accounts@kalosmedia.com to request deletion of your account and associated data.
• Revoking platform access at the source — you can also revoke KalosMedia's access directly from any connected platform's own account settings (see Section 5 for Google's).

9. Children's Privacy

KalosMedia is not directed to, and is not intended for use by, anyone under 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn we have collected information from someone under 18, we will delete it.

10. International Users

KalosMedia is operated from, and its infrastructure is hosted in, the United States. If you use KalosMedia from outside the United States, your information will be transferred to and processed in the United States.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where practical, notify account holders by email.

12. Contact

Questions about this Privacy Policy, or requests regarding your data, can be sent to accounts@kalosmedia.com.