This policy explains how KBhaus, a brand of Maxwell Industries, LLC ("KBhaus," "we," "us"), collects, uses and protects information in the KBhaus Client Portal at portal.kbhausagency.com (the "Portal"), including information we receive when a client connects an Instagram account.
Information we collect
Portal account information
- Your name, email address and the business you are associated with.
- Sign-in records needed to send secure email sign-in links and keep your session active.
- Documents, files, approvals and feedback you or KBhaus add to the Portal.
Instagram information (only if you choose to connect)
When you click "Connect Instagram" and approve access through Instagram, we receive read-only access to your Instagram professional account using the permissions instagram_business_basic and instagram_business_manage_insights. We store:
- Profile details: username, display name, profile picture, and follower, following and post counts.
- Account insights: daily reach, views, accounts engaged, interactions, likes, comments, shares, saves and profile link taps.
- Post details for your recent posts: caption, media type, link, thumbnail, date and per-post insights.
- An access token issued by Instagram, stored encrypted at rest and never shown in the Portal.
We cannot post, comment, send messages or change anything on your Instagram account. We do not collect your Instagram password.
How we use information
- To show you and your KBhaus team your performance dashboards and reports.
- To plan, measure and improve the marketing services in your KBhaus agreement.
- To send Portal sign-in links and service emails.
We do not sell your information, share it with advertisers, or use Instagram data for any purpose other than reporting to you and delivering your services.
Who can see it
Your information is visible only to you, other users you authorize on your account, and the KBhaus team working on your account. Clients cannot see each other's data. We use these service providers to run the Portal, each bound to protect your information:
- Supabase (database, authentication and file storage)
- Netlify (website hosting)
- Resend (email delivery)
- Meta Platforms (Instagram, as the source of Instagram data)
We may disclose information if required by law.
Retention
We keep Portal and Instagram information for as long as you are a KBhaus client and for up to 90 days after your engagement ends, unless you ask us to delete it sooner or the law requires us to keep it longer.
Disconnecting Instagram and deleting your data
You can stop our access and have your data deleted at any time:
- Remove access in Instagram: open Instagram, go to Settings, then Website permissions, then Apps and websites, and remove the KBhaus app. Our access ends immediately.
- Request deletion: email kate@kbhausagency.com with the subject "Data deletion request" and the Instagram username or email on your account.
We delete your Instagram access token, profile details, insights and post data within 30 days of your request and confirm by email once it is done.
Security
Data is encrypted in transit and at rest. Access is restricted by account-level security rules so each client can read only their own information, and Instagram access tokens are never exposed to the browser.
Your rights
You may ask to access, correct or delete your information, or to receive a copy of it. California residents have these rights under the California Consumer Privacy Act, and we will not treat you differently for using them. Email us to make a request.
Changes
If we change this policy, we will update the effective date above and notify active clients of material changes by email.
Contact
Maxwell Industries, LLC, doing business as KBhaus
Laguna Niguel, California
kate@kbhausagency.com