Privacy Policy
Last updated: October 25, 2026
Who we are
Postter is operated by Michel Moraes (tax ID [NIF pending]), [Address pending], Spain. For anything related to your data, contact privacy@postter.io.
What we collect
Account data: your name, email address and a hashed password.
Instagram data: when you connect an account we receive its Instagram user ID, username, name, profile picture and an access token. The token is stored encrypted and is used only to publish what you schedule.
Content you create: the photos and videos you upload, captions, schedules and the status of each post.
Technical data: logs needed to run and secure the service (for example IP address and timestamps).
Why we use it
To provide the service you sign up for: storing your posts and publishing them to Instagram at the time you choose (performance of a contract).
To send service emails, such as confirming your address, resetting your password, or telling you a post failed (performance of a contract).
To keep the service secure and prevent abuse (legitimate interest), and to meet legal obligations.
We do not sell your data and we do not use your content to advertise.
Who processes it for us
Vercel (hosting), Neon (database), ImageKit (media storage), Resend (email) and Meta (the Instagram API, to publish your posts). Payment processing will be handled by Stripe once paid plans exist. Some of these providers may process data outside the European Economic Area under appropriate safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep it
We keep your data while your account is active. Disconnecting an Instagram account deletes its access token immediately. Deleting your data through Meta's data deletion request removes the connected account, its posts and media. Backups expire within 30 days.
Your rights
You can access, correct, delete or export your data, object to or restrict its processing, and withdraw consent at any time by writing to privacy@postter.io. You can also lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Cookies
We only use cookies that are needed for the service to work: your session and your language preference. No advertising or tracking cookies.
Changes
If we change this policy we will update the date above and, for significant changes, let you know by email.