Privacy policy

Who we are

Kayto (kayto.io) is based in Ontario, Canada. When we say "we" or "us" here, that's who we mean. Questions? Email hello@kayto.io.

What we collect

If you're a creator

• The drafts you send: photos, videos, captions and any notes you add
• Your name or handle, and your email address so we can tell you when your draft is reviewed
• Whether you ticked the paid partnership box

If you're a brand reviewer

• Your name, work email and the brand or company you review for
• Your decisions (approve, ask for changes, reject) and the notes you leave

Everyone

• Basic technical data like your browser, device type and approximate location from your IP address
• Cookies or similar tools that keep you signed in and help us see how the site is used

Why we use it

• To deliver your draft to the right brand and show you their decision
• To send you updates about drafts you've sent or need to review
• To keep Kayto secure, fix bugs and improve how it works
• To answer you when you contact us
• To meet legal obligations

We don't use your drafts to train AI models, and we don't use them for ads.

Who sees your drafts

A draft is visible to the brand it was sent to and to the people on that brand's team who have review access. We don't show it to other brands or make it public. Brands decide what happens to a draft after they receive it, and their own privacy policy covers that.

Who we share data with

We don't sell your data, and we don't share it with anyone for their own use. Kayto is built and hosted on Lovable and Lovable Cloud, which run the site and store the database and uploaded files for us. They handle your data only to provide that service.

We may also share information if the law requires it, or to protect Kayto and its users from fraud or abuse. If Kayto is ever sold or merged, your data may move to the new owner and we'll let you know.

Where your data lives

Our providers may store data outside Canada, including in the United States. Your information may be subject to the laws of those places while it's there.

How long we keep it

We keep drafts and review history while a brand's campaign is active, and for 90 days after it closes so both sides can sort out any questions. After that we delete them, unless the law requires us to keep them. You can ask us to delete your data sooner. Account details stay until you ask us to delete them. Copies in backups are removed as backups cycle out, and basic logs are kept for up to 90 days.

Your choices

You can ask us to:

• Show you the personal information we hold about you
• Correct anything that's wrong
• Delete your data or close your account
• Stop sending you emails

Email hello@kayto.io and we'll reply within 30 days. We may need to confirm it's really you first. If you're not happy with how we handled something, you can contact the Office of the Privacy Commissioner of Canada.

Security

Everything between you and Kayto travels over HTTPS, including connections to our database and file storage, and stored data and uploaded files are encrypted on the servers that hold them. We also limit who can get to your data. No system is perfectly secure, so we can't promise absolute protection, but we take it seriously and will tell you if a breach affects you.

Kids

Kayto isn't meant for anyone under 18, and we don't knowingly collect their information. If you think a child has sent us data, email us and we'll delete it.

Changes

If we make a meaningful change to this policy, we'll update the date at the top and let you know on the site or by email.