Privacy Policy

1. Information we collect

• Account information: your email address and authentication details, managed through our authentication provider (Supabase).
• Instagram & Facebook data: when you connect an account via Facebook Login, we access your Instagram Business/Creator account ID and username, the linked Facebook Page ID, and an access token used to publish posts and read post insights. Access tokens are encrypted at rest.
• Content you create: your account “DNA” (persona, niche, visual preferences), prompts, generated captions, hashtags, and images.
• Usage & logs: operational logs of generation and publishing jobs, used to run and debug the Service.
• Payment information: if you subscribe, billing is handled by Stripe. We do not store your full card details.

2. How we use your information

• To generate content and publish posts to your connected Instagram accounts.
• To retrieve post performance metrics and improve future content.
• To operate, secure, and support the Service, and to process subscriptions.

3. Third-party services

We share data only as needed with the providers that power the Service: Meta / Instagram Graph API (publishing and insights), Supabase (database, authentication, storage), DeepSeek (text generation), Google Gemini (image generation and quality checks), and Stripe (payments). Each processes data under its own terms and privacy policy. Our use of information received from Meta APIs follows the Meta Platform Terms and Developer Policies.

4. Data retention & deletion

We keep your data while your account is active. You can disconnect an Instagram account at any time from the dashboard, which deletes the stored access token for that account. To delete your account and all associated data, email us at derik6013@gmail.com and we will remove it, including revoking stored tokens.

5. Your rights

You may request access to, correction of, or deletion of your personal data by contacting us. You can also revoke this app’s access from your Facebook account settings at any time.

6. Security

We use industry-standard measures including encryption of access tokens at rest, encrypted transport (HTTPS), and per-user data isolation. No method of transmission or storage is 100% secure, but we work to protect your information.

7. Children’s privacy

The Service is not directed to anyone under 18, and we do not knowingly collect data from children.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

9. Contact

Questions about this policy? Email derik6013@gmail.com.