Privacy
Last updated 20 August 2026
What this service does
Postcroft drafts social media posts for a business, shows them to the business owner for approval, and publishes the approved ones to that business’s own Facebook Page and Instagram account.
What we store
- Account details. The email address of each person who signs in, and which business they belong to.
- Business information you give us. A description of the business, past posts you share as writing samples, and photographs you upload for use in posts.
- Posts. The drafts we generate, your edits, and a record of which posts you approved and when.
- Meta connection. When you connect a Facebook Page we store the Page’s identifier, the linked Instagram account’s identifier, and an access token. The token is encrypted and is readable only by our server — never by a browser, and never by another customer.
What we access on Facebook and Instagram
With your permission we read the list of Pages you administer so you can pick one; read that Page’s name and linked Instagram account so we can confirm the connection and keep it healthy; and publish the posts you have approved. We do not read your messages, your followers, your audience data or your engagement metrics, and we do not post anything you have not individually approved.
What we never do
- We do not sell or rent your information.
- We do not use one business’s content to write another business’s posts.
- We do not handle health records or patient information of any kind. Nothing in this product is designed to receive it, and it should never be uploaded.
- We do not email or message you outside the product. Notices appear in the app itself.
Processors we use
Hosting and databases (Vercel, Supabase), the language and image models that draft posts (accessed through OpenRouter), and Meta for publishing. Content sent to a model is used to produce your posts; we do not permit it to be used to train models.
Deleting your data
Disconnecting Meta from your business page removes the stored token immediately. To delete your account and everything in it, write to hello@postcroft.com and we will remove it within 30 days. You can also revoke our access at any time from Facebook’s own Business Integrations settings, which stops all publishing at once.