Privacy policy

Last updated 4 November 2026

This policy covers Social Ads.

What we collect

When you connect an Instagram professional account through Meta, we receive and store:

• the account's Instagram ID and username
• your business portfolio ID and an access token from Meta
• performance figures for the account and its posts, such as reach, views, likes, comments, shares and saves

We also store the posts you schedule (the media link, caption and time) and your sign-in username. Your password is stored only as a secure hash. We never see your Instagram or Facebook password.

How we use it

We use this data only to connect your account, publish the posts you schedule, and show you your results. We do not sell it, and we do not use it for advertising.

Who handles it

Each sign-in can only see its own accounts. Data is hosted on Google Cloud in Indonesia, and requests to this site pass through Cloudflare. We share it with Meta only as needed to publish and read your content, and otherwise only where the law requires it.

How we protect it

Access tokens are encrypted when stored, and connections to this site use HTTPS.

How long we keep it

We keep this data while your account is connected. If you remove the app, we delete your access token straight away and cancel unpublished posts. Figures and post records stay until you ask us to delete them.

Disconnecting and deleting your data

To disconnect, remove this app in your Meta Business Settings under Integrations. To delete your data, use the deletion option Meta provides when you remove the app, or contact the person who gave you access. Deleting removes the account, its token, its posts and its figures from our service. Posts already published stay on Instagram, because they belong to your account.

Changes and questions

We'll update this page when these practices change. For questions, contact the person who gave you access.