Privacy
Last updated 2026-09-29.
What we store
Your email address, the photos you upload, the captions generated for them, and the brand details you enter. If you connect Instagram we store an access token so we can publish on your behalf.
Who else sees it
Photos and brand details are sent to Anthropic to generate captions. Payments are handled by Stripe. Instagram receives the posts you choose to publish. We do not sell your data.
Instagram data specifically
When you connect Instagram, we receive your Instagram Business or Creator account ID and username, a long-lived access token, and, depending on which permissions you granted, your recent posts (media URLs, captions, timestamps) and their aggregated engagement metrics (reach, impressions, likes, comments — never who liked or commented). This data is stored on Supabase in the EU region and used only to (a) generate captions in your brand voice and (b) recommend when to publish.
Your Instagram access token is stored encrypted and used server-side only; it never reaches the mobile or web client. We refresh it before its ~60-day expiry so you don't have to reconnect.
Removing your Instagram data
Three routes, all lead to the same result — your Instagram access token and any synced media/insights are deleted from our servers:
- In-app: open your account page, tap Instagram → Disconnect. Your Post The Most account stays; only the Instagram link is removed.
- From Facebook / Instagram: go to Settings → Apps and Websites (Facebook) or Settings → Account Center → Connected experiences → Apps and websites (Instagram), find Post The Most, and remove it. Meta notifies us via a signed data-deletion callback; we delete your Instagram data within 24 h and provide a confirmation code you can quote to support.
- By email: write to support@postthemost.com from the address on your account.
Deleting your account
To remove everything — your account, your captions, your brand words, your Instagram connection — open your account page and choose Delete account, or visit /me?deleteAccount=1. Deletion is permanent and takes effect within 24 h.