Last updated: February 18, 2026
1. Introduction
Welcome to TidyPost. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
2.1 Personal Information
We collect information that you provide directly to us, including:
- Email address
- Password (encrypted)
- Display name or profile information
- Brand and account information
- Social media integration credentials (stored securely)
2.2 Facebook and Instagram Data
When you connect your Facebook and Instagram accounts to TidyPost, we collect and store the following information:
- Facebook Page Information: Page ID, page name, and page access tokens
- Instagram Business Account Information: Instagram account ID, username, and account type
- Access Tokens: OAuth access tokens required to publish content on your behalf
- Content Data: Posts, images, captions, and other content you create or schedule through our platform
This information is collected solely for the purpose of enabling you to publish and manage content on your connected Instagram account. We do not use this information for advertising or share it with third parties for marketing purposes.
2.3 Usage Information
We automatically collect certain information about your use of the service, including:
- Content you create and schedule
- Media files you upload
- Preferences and settings
- Time zone information
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process and schedule your social media posts
- Authenticate your account and ensure security
- Send you notifications and updates about your scheduled posts
- Respond to your inquiries and provide customer support
- Comply with legal obligations
3.1 How We Use Facebook and Instagram Data
Specifically for Facebook and Instagram integration, we use your data to:
- Connect Your Accounts: Query your Facebook Pages to find connected Instagram Business accounts
- Publish Content: Post images, videos, and captions to your Instagram account on your behalf
- Manage Content: Access your Instagram account information (username, account ID) to manage published content
- Account Management: Verify account connection status and manage access tokens
We do NOT:
- Use your Facebook/Instagram data for advertising purposes
- Share your access tokens or account information with third parties
- Access your personal Facebook profile data beyond what is necessary for page management
- Read or access your Instagram direct messages or private content
4. Data Storage and Security
We use industry-standard security measures to protect your information:
- All data is encrypted in transit and at rest
- Passwords are hashed and never stored in plain text
- OAuth tokens are securely stored and encrypted
- Regular security audits and updates
- Access controls and authentication requirements
5. Third-Party Services
We integrate with third-party services to provide our functionality:
- Supabase: For authentication and database services
- Social Media Platforms: Instagram, Facebook, and other platforms you connect
- AI Services: Google Gemini and Groq for content generation
- Email Services: Gmail API for sending notifications
These services have their own privacy policies, and we encourage you to review them.
5.1 Facebook and Instagram (Meta)
When you connect your Facebook and Instagram accounts, you are also subject to Meta's Privacy Policy and Terms of Service. We use Meta's Graph API to:
- Query your Facebook Pages to find connected Instagram Business accounts
- Publish content to your Instagram account
- Access basic account information (username, account ID)
For more information about how Meta handles your data, please review:
6. Your Rights
You have the right to:
- Access and review your personal information
- Update or correct your information
- Delete your account and associated data
- Export your data
- Opt out of certain communications
6.1 Revoking Facebook/Instagram Access
You can revoke TidyPost's access to your Facebook and Instagram accounts at any time:
- Through TidyPost: Go to your account settings and disconnect your Instagram integration
- Through Facebook: Visit your Facebook Settings → Apps and Websites → Remove TidyPost
- Through Instagram: Visit your Instagram Settings → Apps and Websites → Remove TidyPost
When you revoke access, we will immediately stop accessing your accounts and delete all stored access tokens and account information from our systems. Any scheduled posts that have not yet been published will be cancelled.
7. Data Retention
We retain your information for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or legitimate business purposes.
8. Children's Privacy
Our service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us through your account settings or by using the contact information provided in our application.