Last updated: July 10, 2026

What kapydata does

kapydata is a reporting and monitoring tool for marketing/advertising professionals and their clients. Users organise into workspaces (working teams) — a workspace is connected to clients' advertising and social accounts so that its members can view campaign and page performance overviews and track budget pacing. kapydata is not a publicly available app or a product sold through open sign-up — access to a specific workspace's data is limited to its members and to clients for whom one of the members personally creates a report link or client portal access.

What data we process and where it comes from

Users sign in with their Google account — we store only the name, e-mail and unique account ID, nothing more.

For the reporting itself we connect via OAuth to the advertising and social accounts that the client/workspace member personally authorises kapydata to access:

• Meta (Facebook) Ads — ad campaign names and performance (spend, impressions, clicks, conversions).
• Facebook pages and the linked Instagram account — follower counts, reach, impressions and page/profile engagement, plus comments on your posts (read-only, for analysis — sentiment, keywords). We do not read or modify posts, messages or page settings.
• Google Ads — ad campaign names and performance, the same metric set as for Meta Ads.
• Sklik (Seznam.cz) — ad campaign names and performance, the same metric set as for Meta Ads.

For data obtained via Google APIs (Google account sign-in, Google Ads): the use and transfer of this data adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use the data solely to display reports and overviews to their owner, never for advertising, sale or training AI/ML models.

We access all these sources strictly read-only — kapydata never creates, edits or deletes campaigns, posts, comments or any other content of the connected accounts. (Technical note: the permission we use to read Instagram comments is, in Meta's naming, one that also covers editing/deleting/replying to them — unfortunately Meta has no separate read-only permission for Instagram. We do not use that capability anywhere in the app.)

How long we keep data

Performance figures (spend, impressions, reach, etc.) are always fetched live from the APIs at the moment someone views a report/overview — we never store them permanently in any database. The only exception is a short-lived technical cache of responses for the Data Studio connector, which deletes itself after about 30 minutes and exists only so that the same query doesn't have to be fetched from the ad platforms repeatedly. We permanently store only the settings you create yourself: report names and configuration, access tokens of connected accounts and sharing settings.

Data Studio connector

kapydata offers a connector for Google Data Studio (formerly Looker Studio) that lets a client display their workspace's advertising data in their own Data Studio reports. The connector is read-only and authorises with an access key generated in the app by the workspace administrator — the key exposes only the advertising account data of that workspace and can be revoked at any time with a single click (which instantly disconnects all reports that use it). The connector passes only aggregated performance figures (spend, impressions, clicks, conversions, etc.) to Data Studio — never access tokens, users' personal data or account content. Data displayed in Data Studio is then handled by Google under its own Data Studio terms of service.

Who we share data with

A specific client's performance data is shown only to: (1) members of the workspace that manages the account, and (2) the client themselves, via a report link or client portal that one of the workspace members personally creates for them. We never sell the data, never share it with any other third party and never use it to train AI/ML models or for any purpose other than showing the account's performance to its owner.

Security

Access tokens of connected accounts are stored encrypted in a database accessible only to the kapydata app and are never displayed in the public interface. Public report links and client portals can be password-protected and given an expiry.

Cookies

kapydata uses a single cookie — a technical one strictly necessary for signing in and for the app to work (it maintains your session, active workspace and security verification when connecting accounts). It is a so-called session cookie, deleted when you close the browser, and as a strictly necessary cookie it does not require your consent (under Section 89 of the Czech Electronic Communications Act / Article 5(3) of the ePrivacy Directive).

We use no analytics, marketing or advertising cookies (Google Analytics, Meta Pixel, etc.) — the app does not track anyone across websites or other services. That's why you won't find the usual cookie consent bar here — there is nothing to consent to. If we ever deploy an optional tracking tool in the future, we will add a bar here with the option to refuse it before it starts.

The app also remembers only your display preferences in the browser (in so-called local storage, technically distinct from cookies) — light/dark mode and the sidebar state. This data never leaves your browser and the app doesn't send it anywhere.

The app hosts its fonts itself on its own domain — they are not loaded directly from Google Fonts, so your IP address is not sent anywhere to a third party just to display text when you visit the app.

Your rights

You can ask at any time for your account's connection to be removed from kapydata (we immediately lose access to it) or for the deletion of stored settings that concern you. You can also revoke granted access directly in your Facebook/Google account, in the connected apps settings. For a detailed walkthrough see Data deletion.

Contact

Send questions about data processing to info@kapydata.app.