Privacy Policy

This policy describes how Instagram AI Post Studio (“we”, “the app”) collects and uses information when you connect a Facebook Page and a linked Instagram Business or Creator account. The live app is at https://socialmediaagent.quytech.net.

1. Who we are

Instagram AI Post Studio helps you design Instagram posts, generate images, draft captions, and publish them using Meta’s Graph API. You sign in with Facebook OAuth. This page is available without logging in.

2. Meta / Instagram integration — what we access

When you tap “Continue with Facebook”, Meta shows a permission dialog. If you approve, we request the following Facebook/Instagram permissions and related data:

• Facebook profile: your Facebook user ID and name (/me).
• Facebook Pages you manage: Page ID, Page name, and a Page access token (pages_show_list, pages_read_engagement).
• Linked Instagram Business account: Instagram user ID for the account connected to that Page (instagram_basic).
• Recent Instagram media (for style matching): media ID, caption, media type, media URL or thumbnail URL, and timestamp from recent posts (/{ig-user-id}/media).
• Publishing: we create and publish image posts to your Instagram account using instagram_content_publish.

We do not request your Instagram password. We do not access your personal (non-business) Instagram feed, direct messages, or Facebook friends list.

3. What other data we collect

• Session cookie: a signed cookie so the app knows you are logged in.
• Chat messages: prompts and replies used to design posts, kept in server memory during your session.
• Company profile: business details you provide or that we look up (name, website, location, industry, services, audience, visual cues).
• Instagram style profile: a summary of caption tone and visual mix derived from recent posts.
• Generated assets: image files, captions, and image prompts created for posts you approve.

4. Why we collect it

• Authenticate you and connect the correct Facebook Page and Instagram Business account.
• Publish posts you explicitly confirm.
• Match generated captions and images to your existing Instagram style.
• Ground creative direction in your company profile.
• Keep you logged in while you use the studio.

5. How we use it

Facebook/Instagram identifiers and the Page access token are used only to call Meta Graph API on your behalf (read recent media for style, create a media container, and publish). Chat content, company info, and style notes are sent to AI providers so the studio can draft captions and image prompts. Generated images are hosted so Meta can fetch them when you publish.

We do not sell your data. We do not use Instagram content to advertise to other people.

6. Where and how it is stored

• SQLite database on the application server (users.db): Facebook user ID, name, Page ID/name, Instagram user ID, Page access token, company profile, Instagram style profile, and timestamps.
• Disk: generated post images under the app’s static files directory.
• Memory: chat history for the current session.
• Browser: a session cookie required to stay signed in.

Storage is on the machine running this app at https://socialmediaagent.quytech.net.

7. How long we retain it

• Account and token data: deleted from our database when you click Sign out. You must sign in with Facebook again to use the studio. Closing the browser tab or window is not logout — your row stays in our database until you Sign out or we process a deletion request (email or Meta callback).
• Chat history: deleted when you log out, reset the session, or the server process restarts.
• Generated images: until deleted from the server or you request deletion. Logout does not automatically remove image files from disk.

8. Sharing with third parties

We share data only as needed to operate the product:

• Meta Platforms (Facebook / Instagram Graph API): tokens, Instagram user ID, image URL, and caption when you publish; media metadata when we analyze style.
• Anthropic: chat messages and related context to run the creative assistant.
• Google (Gemini): prompts and, when analyzing style, selected image/caption context for image generation and company/style lookup.

Those providers process data under their own terms. We do not share your Page access token with anyone other than Meta’s API.

9. How to request deletion

Logging out (Sign out) deletes your stored Facebook/Instagram connection from our database. Closing the tab does not. You can also ask us to delete leftover data at any time. Instructions are on our public Data Deletion page. Facebook can also send a signed deletion callback to https://socialmediaagent.quytech.net/data-deletion-callback. You can remove the app in Facebook: Settings & privacy → Settings → Apps and websites.

10. How to contact us

Privacy questions and deletion requests: info@quytech.com.

11. Changes

We may update this policy as the product or Meta requirements change. The “Last updated” date at the top will change when we do. Continued use after an update means you accept the revised policy.