Privacy Policy

Last updated: 12/19/2025

1. Information We Collect

We collect information you provide directly to us, such as when you:

  • Create an account and complete onboarding
  • Connect your Instagram account
  • Generate and schedule Instagram posts
  • Contact us for support
  • Subscribe to our service

This information may include your name, email address, brand information, Instagram account details, access tokens (stored securely), and any content you create using our platform.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Instagram post scheduling services
  • Generate AI-powered content based on your brand preferences
  • Schedule and publish posts to your Instagram account
  • Process transactions and send related information
  • Send technical notices, updates, security alerts, and support messages
  • Respond to your comments, questions, and requests
  • Communicate with you about products, services, offers, and events

3. Instagram Account Information

When you connect your Instagram account, we securely store your Instagram access token to enable automatic posting of approved content. We do not store your Instagram password. You can disconnect your Instagram account at any time through your account settings, which will immediately revoke our access.

4. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy. We may share your information with:

  • Service Providers: Third-party services that assist us in operating our platform, including OpenAI (for content generation), Bannerbear (for image creation), Resend (for email notifications), and Meta/Instagram (for publishing posts)
  • Legal Requirements: When required by law or to protect our rights and safety

5. Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of sensitive data, secure storage of access tokens, and regular security audits. However, no method of transmission over the internet is 100% secure.

6. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience on our website, authenticate users, and analyze usage patterns. You can control cookie settings through your browser preferences.

7. Third-Party Services

Our service integrates with third-party services:

  • Meta/Instagram: For publishing posts to your Instagram account. Their privacy policy applies to Instagram-related data.
  • OpenAI: For generating post captions and content. Content is processed according to OpenAI's privacy policy.
  • Bannerbear: For creating post images. Image generation is processed according to Bannerbear's privacy policy.
  • Resend: For sending email notifications. Email data is processed according to Resend's privacy policy.
  • Stripe: For payment processing. Payment data is handled according to Stripe's privacy policy.
  • Clerk: For user authentication. Authentication data is handled according to Clerk's privacy policy.

We encourage you to review the privacy policies of these third-party services.

8. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required by law. When you delete your account, we will delete your personal information and Instagram access tokens, except where we are required to retain it for legal or business purposes.

9. Your Rights

You have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Delete your personal information and account
  • Disconnect your Instagram account at any time
  • Object to processing of your information
  • Data portability (export your data)
  • Request data deletion through our API endpoint

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

11. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where applicable.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page, updating the "Last updated" date, and sending you an email notification if the changes are significant.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at hi@avalonplatforms.com.