Privacy Policy

Effective date: March 2026

1. Data Controller

Amakori GmbH i.G.
Stephan Baier
Obere Paulusstraße 49
70197 Stuttgart, Germany
Email: hello@amakori.com

2. What We Do

Amakori is an AI-powered agency operating system that helps businesses manage their social media presence through specialized AI agents. Our platform creates, schedules, optimizes, and publishes content on behalf of our clients across social media platforms including Instagram, TikTok, and LinkedIn.

3. Data We Collect

3.1 Account Data

When you create an account, we collect your name, email address, company name, and password. This data is necessary to provide our services.

3.2 Social Media Account Data

When you connect your social media accounts (Instagram, TikTok, LinkedIn), we receive access tokens through OAuth authorization. We use these tokens exclusively to:

  • Publish content you have approved to your accounts
  • Retrieve performance insights and analytics for your posts
  • Read basic profile information (username, profile picture)

We never access your direct messages, follower lists beyond aggregate counts, or any data unrelated to content publishing and performance analytics. We do not sell or share your social media data with third parties.

3.3 Content Data

We store content created by our AI agents on your behalf, including captions, hashtags, and scheduling data. All content requires your explicit approval before publication.

3.4 Usage and Analytics Data

We collect platform performance data (impressions, reach, engagement rates) from your connected social media accounts to optimize future content. This data is used exclusively for your account and is not shared across clients.

3.5 Technical Data

When you visit our website or use our platform, we automatically collect server log data including IP address, browser type, and access timestamps. We do not use tracking cookies or third-party analytics tools.

4. How We Use Your Data

  • To provide and improve our AI-powered content services
  • To publish approved content to your social media accounts
  • To retrieve and display performance analytics
  • To optimize content recommendations based on past performance
  • To send you notifications about content approvals and system events
  • To process billing and credit usage

5. Data Storage and Security

Your data is stored on servers located in the European Union (Frankfurt, Germany) using Supabase (PostgreSQL with Row-Level Security). Social media access tokens are stored encrypted. We implement strict multi-tenant isolation — your data is never accessible to other clients.

Our website is hosted on Vercel (EU servers). Backend services are hosted on EU-based infrastructure.

6. Third-Party Services

We use the following third-party services:

  • Supabase — Database and authentication (EU Frankfurt)
  • Vercel — Website and platform hosting (EU)
  • Anthropic — AI language model for content generation (data processed per their API terms; no training on your data)
  • Resend — Transactional email delivery
  • Meta/Instagram Graph API — Content publishing and insights
  • TikTok Content Posting API — Content publishing and insights
  • LinkedIn Marketing API — Content publishing and insights

7. Data Retention

We retain your account data and content for the duration of your subscription. Social media access tokens are retained as long as your accounts are connected. Performance analytics data is retained for up to 24 months to enable long-term optimization.

Upon account deletion, we remove all your personal data, content, and access tokens within 30 days. Aggregated, anonymized analytics may be retained.

8. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Access your personal data (Art. 15 GDPR)
  • Rectify inaccurate data (Art. 16 GDPR)
  • Request deletion of your data (Art. 17 GDPR)
  • Restrict processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)

To exercise any of these rights, contact us at hello@amakori.com.

9. Revoking Social Media Access

You can disconnect your social media accounts at any time through your Amakori dashboard. Upon disconnection, we immediately delete the associated access tokens and stop all publishing and data retrieval for that account.

You can also revoke access directly through the respective platform's settings (Instagram, TikTok, or LinkedIn).

10. Children's Privacy

Our services are intended for businesses and are not directed at individuals under the age of 16. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify registered users of significant changes via email.

12. Contact

For privacy-related inquiries, contact us at:
hello@amakori.com

Supervisory authority: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.