Skip to content

Legal

Privacy Policy

Last updated: October 29, 2026

This policy explains what data Kobu (“we”) collects when you use our website and service, how we use it, and your choices. Kobu lets Instagram Professional accounts schedule posts and automate replies to comments and direct messages using the Instagram API with Instagram Login, provided by Meta.

Data we collect

  • Account data: your name, email address and billing details (processed by our payment provider).
  • Instagram data you authorize: your Instagram user ID, username, profile information, media, comments and messages on your account, and insights, only within the permissions you grant during Instagram Login.
  • Data from people who interact with you: when someone comments on your post or messages your account, we process their Instagram-scoped ID, username and the message content only to run the automations you set up.
  • Usage data: logs needed to operate and secure the service.
  • Anonymous website measurement: on our website we test different headlines. Your browser stores a random headline number (1 to 5) in local storage for 30 days, and we record anonymous events (page view, “Start free” click, “Pricing” click) with that number, the page path, the device type (mobile or desktop) and the utm_source of the link you came from, if any. We do not store IP addresses, names or identifiers for this, and we do not use third-party analytics or advertising cookies. If your browser sends Do Not Track or Global Privacy Control, we do not record these events.
  • UTM parameters in your DMs: Kobu can add UTM tags (for example utm_source=instagram&utm_medium=dm) to the links you send in automated DMs, so you can measure traffic in your own analytics tools. These tags describe the campaign, not the person who clicks, and Kobu does not track recipients across websites.

How we use data

  • To publish the posts you schedule and send the replies and DMs you configure.
  • To show you analytics about your automations and account.
  • To generate automation drafts when you use AI features. Your prompts are sent to our AI provider only for this purpose.
  • To provide support, billing and security.

We do not sell personal data. We do not use Instagram data for advertising, and we do not share it with third parties except service providers that help us run Kobu (hosting, payments, AI processing), under confidentiality obligations.

Retention

We keep your data while your account is active. When you disconnect Instagram or delete your account, we delete the associated Instagram data within 30 days, except where the law requires us to keep records (for example, billing).

Your rights

You can access, correct, export or delete your data. You can revoke Kobu’s access at any time in Instagram settings (Apps and websites). See our Data Deletion page.

Cookies

See our Cookie Policy.

Security

Access tokens are encrypted at rest and data is transmitted over HTTPS.

Children

Kobu is not intended for people under 18.

Contact

Questions: hello@usekobu.com