Privacy Policy

Last updated: June 4, 2026

Overview

Post It (“we”, “us”) helps content creators publish to Instagram with AI-generated captions and hashtags. This policy explains what we collect, how we use it, and the choices you have. We collect the minimum needed to provide the service.

Information we collect

  • Instagram account info. When you connect via Instagram Login, we receive your Instagram user ID, username, and an access token that lets us publish on your behalf.
  • Media you upload. Images and videos you choose to publish are stored so Instagram can retrieve them at publish time.
  • Caption inputs. The caption prompts you write and the captions/hashtags generated for you.
  • Session data. A signed, httpOnly cookie that keeps you logged in. It contains your Instagram user ID and username only — no access token.

How we use your information

  • To authenticate you and keep you signed in.
  • To generate captions and hashtags from your prompt and uploaded image.
  • To publish the posts, reels, and stories you explicitly choose to publish. We never post without an action you take.

Third-party services

We share data with these providers only as needed to run the service:
  • Meta / Instagram — to authenticate your account and publish content via the Instagram Graph API.
  • Anthropic (Claude) — your uploaded image and caption prompt are sent to generate a caption and hashtags.
  • Hosting & storage — our hosting and media-storage providers store the app and your uploaded media.
We do not sell your personal information.

Data retention

We keep your connection and media for as long as your account is connected. When you disconnect (log out), we delete the stored connection and clear your session. You may request deletion of any remaining data at any time.

Security

Access tokens are stored server-side and never exposed to your browser. Sessions use signed, httpOnly, same-site cookies. We serve the site over HTTPS with security headers including a Content Security Policy, and we apply CSRF protections on actions that change data. No system is perfectly secure, but we work to protect your data.

Your rights

Depending on where you live (e.g. GDPR, CCPA), you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. To exercise these rights, contact us using the details below. You can also revoke our access anytime from your Instagram settings.

Children

Post It is not intended for anyone under 13 (or the minimum age in your country), and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time. We’ll revise the “Last updated” date above and, for material changes, provide a more prominent notice.

Contact

Questions or requests? Email privacy@example.com. (Replace with your real contact address before launch.)