Legal
Privacy Policy
Last updated: September 30, 2026 · Effective: September 30, 2026
1. Who We Are
Keeng ("Keeng," "we," "us," or "our") is an AI-powered social media content platform that helps brands create, plan, and manage Instagram content. We are operated by Keeng and reachable at hello@keeng.ai.
For the purposes of Israeli privacy law, Keeng is the database owner (ba'al maagar) of the personal information collected through our services.
2. Information We Collect
2.1 Information You Provide
- Account information: Email address and password when you register.
- Brand information: Brand name, industry, description, website URL, Instagram/TikTok handles, colors, fonts, logo, and brand voice details you submit during onboarding.
- Content: Images, logos, and other creative assets you upload to our platform (including content bank uploads and custom fonts).
- Communications: Messages you send to our support team.
- Payment information: Billing details processed by Stripe. We do not store full card numbers — Stripe is our PCI-DSS compliant payment processor.
2.2 Information Collected Automatically
- Usage data: Pages viewed, features used, content generated, actions taken within the platform.
- Technical data: IP address, browser type, device type, operating system, referring URLs, session duration.
- Cookies and local storage: Authentication tokens and session data necessary to keep you logged in, and, on our public website, Google Analytics cookies (see Section 10).
2.3 Information from Third Parties
- Social media data: When you provide your Instagram or TikTok handle, we may retrieve public profile and post data via our data partners (Apify) to analyze your brand presence. We only access publicly available data.
- Stripe: Subscription status and billing events from our payment processor.
2.4 Instagram Accounts You Connect
You can connect a brand's Instagram professional account (business or creator) to Keeng, either by signing in with that Instagram account (Instagram Login) or with a Facebook account that manages the Facebook Page linked to it (Facebook Login for Business). Connecting is optional and happens only when you choose to. Through Meta's Instagram API we then receive:
- Account identity: the Instagram account's ID and username.
- An access token that lets Keeng act on that account within the permissions you granted. With Facebook Login for Business, this is the access token of the Facebook Page linked to the brand's Instagram account, and we also read the list of Pages you manage in order to find that one account.
- The account's posts: captions, timestamps, links and media type of its recent posts.
- Post insights: reach, saves, shares, likes, comments and total interactions for those posts.
We do not access direct messages, we do not read or send comments on your behalf, and we do not access any Instagram account or Page other than the one you connect to the brand.
3. How We Use Your Information
We use your information to:
- Create and maintain your account and provide our services
- Generate AI-powered brand strategies, content calendars, and social media posts tailored to your brand
- Publish to a connected Instagram account the posts, carousels and stories you have approved, only when you press Post now or schedule them, and show where each post stands
- Learn from the insights of your published posts which kinds of posts perform best, to plan the brand's next month
- Process payments and manage your subscription
- Send transactional emails (account confirmation, billing receipts)
- Improve and develop our platform and AI models
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
- Respond to your support requests
We do not sell your personal information to third parties. We do not use your brand data or uploaded content to train AI models without your explicit consent.
4. Legal Basis for Processing
4.1 Israel (Privacy Protection Law, 5741-1981)
Under Israeli law, we process your personal information on the following bases:
- Consent: By registering and using Keeng, you consent to the collection and processing of your personal information as described in this policy.
- Contract performance: Processing necessary to provide the services you subscribed to.
- Legal obligation: Where required by Israeli law.
- Legitimate interest: For fraud prevention, security, and service improvement, where such interests are not overridden by your rights.
Our database of personal information is registered/managed in accordance with applicable Israeli privacy regulations. As a user, you have the right to review your personal information held in our database and to request corrections.
4.2 United States
We process your information as necessary to fulfill our contract with you, comply with legal obligations, and pursue legitimate business interests. For California residents, see Section 9 for CCPA/CPRA-specific rights.
5. Sharing Your Information
We share your information only in the following circumstances:
- Service providers: Supabase (database and storage), Stripe (payments), OpenAI (the AI that reads your brand, writes and checks your posts, and describes your photos), Apify (collecting public Instagram posts), SendGrid (email), Railway (backend hosting), Vercel (frontend hosting), and Google (web fonts, the small site icons shown next to brands, and Google Analytics on our public website, see Section 10). Each provider processes data only as needed to deliver their service.
- Legal requirements: When required by law, court order, or governmental authority in Israel, the United States, or other applicable jurisdiction.
- Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.
- Meta: When you publish from Keeng, the post's images and caption are sent to Instagram through Meta's API so that Meta can publish them on the account you connected. Meta processes them under its own terms and privacy policy.
- With your consent: For any other purpose with your explicit agreement.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. Specifically:
- Account data: Retained until account deletion plus 30 days for backup purposes.
- Generated content: Retained while your account is active. Deleted within 90 days of account termination.
- Payment records: Retained for 7 years as required by applicable financial regulations in Israel and the US.
- Usage logs: Retained for up to 12 months.
- Instagram connection: The access token and account ID are kept only while the account stays connected and are deleted as soon as you disconnect it. Post insights are kept with the brand's posts while your account is active.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption in transit (TLS/HTTPS) and at rest
- Row-level security on our database
- Access controls limiting employee access to personal data
- Regular security reviews
No system is perfectly secure. If we become aware of a security breach affecting your personal information, we will notify you as required by applicable law, including the Israeli Privacy Protection Regulations (Data Security) 5777-2017 and applicable US state breach notification laws.
8. International Data Transfers
Keeng is a global service. Your information may be stored and processed in the United States, European Union, or other countries where our service providers operate. When transferring data from Israel, we take steps to ensure adequate protection consistent with Israeli privacy law requirements. By using our service, you acknowledge that your information may be transferred internationally.
9. Your Rights
9.1 All Users
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to certain types of processing.
9.2 Israeli Residents
Under the Privacy Protection Law, 5741-1981, you have the right to:
- Review personal information held about you in our database (maagar meida)
- Request correction of inaccurate data
- Withdraw consent to receive marketing communications
To exercise these rights, contact us at hello@keeng.ai. We will respond within 30 days.
9.3 California Residents (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: Request disclosure of categories and specific pieces of personal information collected, sources, purposes, and third parties with whom it is shared.
- Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising. If this changes, we will update this policy and provide an opt-out mechanism.
- Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond what is necessary to provide our services.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.
To submit a CCPA/CPRA request, email hello@keeng.ai with subject "California Privacy Request." We will verify your identity and respond within 45 days, with a possible 45-day extension.
Shine the Light: California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for direct marketing. We do not disclose personal information for third-party direct marketing purposes.
9.4 Other US States
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with comprehensive privacy laws may have similar rights to access, correct, delete, and port their personal information. Contact us at hello@keeng.ai to exercise any applicable rights.
9.5 Disconnecting Instagram and Deleting Its Data
- Disconnect a brand's Instagram at any time in the brand's Settings, under Instagram, Disconnect. We delete the access token and account ID immediately.
- You can also remove Keeng from Instagram (Settings, Apps and websites) or from Facebook (Settings, Business integrations). Meta then notifies us and we delete the access token for that account.
- To have all data we received from Instagram deleted, use the data deletion request in your Instagram or Facebook settings, or email hello@keeng.ai. We delete it within 30 days and confirm when it is done.
10. Analytics and Cookies
We use essential cookies and local storage for authentication and session management. You can control cookie settings through your browser, but disabling essential cookies may prevent you from using our service.
On our public website (keeng.ai), and never inside the Keeng app, we use Google Analytics, loaded through Google Tag Manager, to understand how people find the site and what they do there. Google Analytics sets cookies whose names begin with _ga, kept for up to 13 months.
- In the European Economic Area, the United Kingdom and Switzerland: Google Analytics runs only if you accept it in the cookie banner.
- Everywhere else: it runs unless you decline it.
- Changing your choice: use "Cookie settings" at the bottom of the page, at any time. Declining deletes the _ga cookies.
- Global Privacy Control: we honour it. If your browser sends it, Google Analytics does not load.
Google acts as our processor for this data. We do not use advertising cookies.
11. Children's Privacy
Our services are not directed to children under the age of 18 (or the applicable age of majority in your jurisdiction). We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at hello@keeng.ai and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on our platform at least 30 days before the changes take effect. Continued use of our services after the effective date constitutes acceptance of the updated policy.
13. Contact Us
For privacy-related questions, requests, or complaints, contact us at:
If you are an Israeli resident and are not satisfied with our response, you may contact the Israeli Law, Information and Technology Authority (ILITA) at www.gov.il/en/departments/ilita.