Privacy Policy

AIStudio ("we", "us"), an AlgoCoded product, lets businesses schedule and automatically publish content to their own Instagram professional accounts. This policy explains what data we collect, how we use it, who we share it with, and how you can have it deleted. By using AIStudio you agree to this policy.

Data we collect

• Account data (email sign-up): your name, email address, and password. Passwords are stored hashed (bcrypt) — we never store or see your plain-text password.
• Google sign-in data: if you sign up or log in with Google, we receive your name, email address, profile picture, and Google account identifier from Google. We use these only to create and authenticate your AIStudio account. We never receive or store your Google password, and we do not access any other Google services (no Gmail, Drive, Calendar, or Contacts data).
• Instagram connection data: when you connect an Instagram professional account through Instagram's own login and consent screen, we receive and store an access token, your Instagram-scoped user ID, and your Instagram username. Access tokens are encrypted at rest (AES-256-GCM) and used only to publish the content you schedule. We never receive or ask for your Instagram password, and we do not access your followers, messages, or insights.
• Content you create: the images, videos, captions, and schedule times you upload in order to schedule and publish posts.

We do not collect advertising identifiers, run third-party analytics trackers, or buy data about you from anyone.

Instagram permissions we request, and why

• instagram_business_basic — used to read your connected account's ID and username, so your dashboard can show exactly which Instagram account your posts will publish to.
• instagram_business_content_publish — used to publish the posts you composed and scheduled to your connected account. We never post anything you didn't create and approve.

These are the only two permissions we request — the minimum required for the product to function. We do not sell your data or use it for advertising.

How we use your data

• To create your account and authenticate you (email/password or Google sign-in).
• To publish the posts you schedule to the Instagram account you connected, on your behalf, at the time you chose.
• To maintain a valid Instagram connection (we refresh your access token before it expires).
• To show you the status of your media, scheduled, and published posts.

Third parties we share data with

• Meta / Instagram: your scheduled content and access token are sent to the official Instagram API (Meta Platforms, Inc.) to publish your posts.
• Google: if you use Google sign-in, authentication is performed by Google; we receive only the profile data described above.
• Image hosting (ImgBB): Instagram requires a public URL to ingest images, so images in a post are uploaded to our image host at publish time to obtain that URL.
• MongoDB Atlas (database hosting): stores your account, connection, and content data.

We share data with these processors only to operate the service. We never sell your data.

Security

Instagram access tokens are encrypted at rest with AES-256-GCM. Passwords are hashed with bcrypt. Connections to the service are encrypted in transit (HTTPS). Access to production data is restricted to the operators of the service.

Retention

We retain your data for as long as your account is active. If you disconnect Instagram from your dashboard, the stored access token for that connection is deleted immediately. If you remove AIStudio from your Instagram account settings, Meta notifies us automatically and we delete the associated connection and token. Uploaded media and scheduled posts remain until you delete them or your account.

Deleting your data

You can disconnect Instagram at any time from your dashboard, delete individual media and posts, or request full deletion of your account and all associated data. See our Data Deletion page for instructions — deletion requests made through Instagram's "Apps and Websites" settings are honored automatically via Meta's data-deletion callback.

Children

AIStudio is a business tool and is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children.

Changes to this policy

If we make material changes to this policy we will update this page and the date above. Continued use of AIStudio after changes means you accept the updated policy.

Contact

Questions about this policy or your data? Email contact@algocoded.com.