Account security
Your account stays yours
We never see your password
When you connect Instagram or TikTok, you sign in on Instagram's or TikTok's own website — not on KitVerify. That login page belongs to the platform; your password goes to them, never to us. What KitVerify receives back is a limited access key that the platform issues after you approve the connection.
Read-only access
The access we ask for can only read: your profile basics, follower counts, view and engagement numbers, and your recent posts — the numbers that appear on your media kit. It cannot post, send messages, follow or unfollow anyone, or change anything on your account. You can see exactly what is requested on the platform's consent screen before you approve.
How your connection is stored
The access key the platform issues is encrypted at rest with AES-256-GCM before it is stored. We never store your password, because we never have it.
You can disconnect anytime
You can disconnect an account from your kit's editor at any time. You can also revoke KitVerify's access entirely from the platform itself — in Instagram under Settings → Website permissions → Apps and websites, or in TikTok under Settings → Security → Manage app permissions. Revoking there cuts off our access immediately, no questions asked.
Prefer not to connect?
You never have to connect an account. You can type your numbers in manually — they simply appear on your kit labeled as self-reported rather than synced, as described in our methodology.