Privacy Policy

Account information. When you create an account we collect your name, email address, and any profile details you provide.

Connected accounts. When you connect a third-party account (such as Instagram, Facebook, or Google), we receive and store access tokens and basic account information needed to display your content. For example, your Instagram or Facebook username, profile picture, follower count, and posts; or your Google Business profile and its reviews. Access tokens are stored encrypted.

Content. The posts, media, reviews, and related metadata we retrieve from your connected accounts so they can be shown in the widgets you create.

Usage data. Basic technical data such as IP address, browser type, and widget view counts, used to operate and secure the Service.

We use your information only to:

• Provide and operate the Service and the widgets you build;
• Fetch and display your own content from accounts you connect;
• Authenticate you, secure your account, and prevent abuse;
• Process payments for paid plans;
• Provide support and communicate service-related updates.

When you connect an Instagram Business or Creator account, we use Meta's official Instagram API and request only the instagram_business_basic permission. When you connect a Facebook Page you manage, we use Facebook Login and request only pages_show_list and pages_read_engagement. We use this access solely to read your own profile information and posts in order to display your own content inside the widgets you create and embed on your own websites.

We do not access content from accounts or Pages you do not own, we do not sell your Instagram or Facebook data, and we do not use it for advertising or share it with third parties for their own purposes. We never post, message, or modify anything on your behalf. You can disconnect at any time from the widget editor, which removes the stored token and content.

When you connect a Google Business Profile, we use Google's official Business Profile API to read your business's reviews so they can be displayed in your widgets. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data or use it for advertising.

Paid plans are processed by our payment provider (Razorpay). Card and payment details are handled directly by the provider; we do not store your full card details on our servers.

We do not sell your personal information. We share data only with service providers that help us run the Service (such as hosting and payment processing), and only as needed to provide it. We may disclose information if required by law.

We retain your information for as long as your account is active. You can delete your connected accounts at any time from the dashboard, and you can request deletion of your entire account by contacting us at [email protected]. When you remove our app from your Instagram or Facebook account, or submit a data deletion request, we delete the corresponding tokens and content. See our Data Deletion page.

We use essential cookies to keep you signed in and to operate the Service. We do not use cookies for third-party advertising.

We protect your data with industry-standard measures, including encryption of stored access tokens and encrypted connections (HTTPS). No method of transmission or storage is 100% secure, but we work to safeguard your information.

The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above when we do, and material changes will be communicated where appropriate.

If you have any questions about this Privacy Policy or your data, contact us at [email protected].