Privacy Policy

Last updated: February 18, 2026

1. Introduction

Welcome to TidyPost. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

  • Email address
  • Password (encrypted)
  • Display name or profile information
  • Brand and account information
  • Social media integration credentials (stored securely)

2.2 Facebook and Instagram Data

When you connect your Facebook and Instagram accounts to TidyPost, we collect and store the following information:

  • Facebook Page Information: Page ID, page name, and page access tokens
  • Instagram Business Account Information: Instagram account ID, username, and account type
  • Access Tokens: OAuth access tokens required to publish content on your behalf
  • Content Data: Posts, images, captions, and other content you create or schedule through our platform

This information is collected solely for the purpose of enabling you to publish and manage content on your connected Instagram account. We do not use this information for advertising or share it with third parties for marketing purposes.

2.3 Usage Information

We automatically collect certain information about your use of the service, including:

  • Content you create and schedule
  • Media files you upload
  • Preferences and settings
  • Time zone information

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process and schedule your social media posts
  • Authenticate your account and ensure security
  • Send you notifications and updates about your scheduled posts
  • Respond to your inquiries and provide customer support
  • Comply with legal obligations

3.1 How We Use Facebook and Instagram Data

Specifically for Facebook and Instagram integration, we use your data to:

  • Connect Your Accounts: Query your Facebook Pages to find connected Instagram Business accounts
  • Publish Content: Post images, videos, and captions to your Instagram account on your behalf
  • Manage Content: Access your Instagram account information (username, account ID) to manage published content
  • Account Management: Verify account connection status and manage access tokens

We do NOT:

  • Use your Facebook/Instagram data for advertising purposes
  • Share your access tokens or account information with third parties
  • Access your personal Facebook profile data beyond what is necessary for page management
  • Read or access your Instagram direct messages or private content

4. Data Storage and Security

We use industry-standard security measures to protect your information:

  • All data is encrypted in transit and at rest
  • Passwords are hashed and never stored in plain text
  • OAuth tokens are securely stored and encrypted
  • Regular security audits and updates
  • Access controls and authentication requirements

5. Third-Party Services

We integrate with third-party services to provide our functionality:

  • Supabase: For authentication and database services
  • Social Media Platforms: Instagram, Facebook, and other platforms you connect
  • AI Services: Google Gemini and Groq for content generation
  • Email Services: Gmail API for sending notifications

These services have their own privacy policies, and we encourage you to review them.

5.1 Facebook and Instagram (Meta)

When you connect your Facebook and Instagram accounts, you are also subject to Meta's Privacy Policy and Terms of Service. We use Meta's Graph API to:

  • Query your Facebook Pages to find connected Instagram Business accounts
  • Publish content to your Instagram account
  • Access basic account information (username, account ID)

For more information about how Meta handles your data, please review:

6. Your Rights

You have the right to:

  • Access and review your personal information
  • Update or correct your information
  • Delete your account and associated data
  • Export your data
  • Opt out of certain communications

6.1 Revoking Facebook/Instagram Access

You can revoke TidyPost's access to your Facebook and Instagram accounts at any time:

  • Through TidyPost: Go to your account settings and disconnect your Instagram integration
  • Through Facebook: Visit your Facebook Settings → Apps and Websites → Remove TidyPost
  • Through Instagram: Visit your Instagram Settings → Apps and Websites → Remove TidyPost

When you revoke access, we will immediately stop accessing your accounts and delete all stored access tokens and account information from our systems. Any scheduled posts that have not yet been published will be cancelled.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or legitimate business purposes.

8. Children's Privacy

Our service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us through your account settings or by using the contact information provided in our application.