1.Overview of How the App Works
The App helps you build and publish an Instagram presence with the help of our editorial team ("Producers"):
- You send photos and videos to us via WhatsApp.
- We store your uploads in a private gallery accessible to you and to our Producers.
- Producers review, select, and edit your photos and videos, then schedule them for publishing.
- With your authorization, the App publishes selected content to your Instagram account on your behalf, using Meta's Business integration.
By using the App, you consent to the processing described in this policy.
2.Personal Data We Collect
Content you provide via WhatsApp
- Photos and videos you upload
- Any captions, messages, or text you send alongside them
WhatsApp account data (via the WhatsApp Business Platform)
- Your phone number
- Your WhatsApp profile name
Instagram / Meta data (when you connect your account via Meta Business integration)
- Instagram account ID and username
- Access tokens authorizing us to publish on your behalf
- Content performance metrics and insights for content we publish
- Basic profile information permitted by the scopes you grant
Account and usage data
- Information linking you to your gallery (account identifier, preferences)
- Records of publishing activity, scheduling, and edits
- Technical data such as log data and timestamps
3.How We Use Your Data and Our Legal Basis
We only use your data for the purposes below. Under the GDPR, each purpose has a legal basis:
| Purpose | Legal basis |
|---|---|
| Receiving your uploads via WhatsApp and storing them in your gallery | Performance of a contract (Art. 6(1)(b)) |
| Enabling Producers to review, select, and edit your content | Performance of a contract (Art. 6(1)(b)) |
| Scheduling and publishing content to your Instagram on your behalf | Consent (Art. 6(1)(a)) |
| Storing and using access tokens to connect to your Instagram | Consent (Art. 6(1)(a)) |
| Measuring performance of published content | Legitimate interests (Art. 6(1)(f)) / Consent |
| Securing the App and preventing abuse | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
We do not use your photos or videos to train machine-learning models, and we do not sell your personal data.
4.Producer Access to Your Content
Please note clearly: our Producers (human members of our team) can view, download, and edit the photos and videos in your gallery. This access is limited to Producers assigned to your account and exists solely to select, edit, and schedule content for publication. Producers are bound by confidentiality obligations and access controls that restrict which content each Producer can see.
5.Publishing to Instagram on Your Behalf
When you connect your Instagram account through Meta's Business integration, you authorize us to publish selected content to that account as you.
- We request only the permissions (scopes) needed to publish content and read basic performance data.
- We store your access tokens securely and use them only for the purposes you authorized.
- You can revoke this authorization at any time by disconnecting your Instagram account in the App or by removing the App's access in your Meta/Instagram account settings. Revocation stops all future publishing.
Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies, including any limited-use requirements.
6.Data Sharing and Third Parties
We share data only as needed to operate the App:
- Meta Platforms (Instagram, WhatsApp): to receive your uploads and publish content to your Instagram.
- Producers: as described in Section 4.
- Service providers (subprocessors): cloud hosting and storage, media processing/editing tools, and analytics providers, each acting under contract and only on our instructions.
- Legal and safety: where required by law, or to protect our rights, users, or the public.
We do not sell your personal data or share it for advertising purposes.
7.International Transfers
Where data is transferred outside the European Economic Area (for example, to a cloud provider), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. The data is hosted and processed in the European Union, on local hardware; no cloud providers are used for data storage nor app hosting.
8.Data Retention
- Uploads and gallery content: retained for as long as your account is active, and deleted within 14 days after you delete the content or your account.
- Published content records and metrics: retained for 3 months to support reporting.
- Access tokens: retained only while your Instagram remains connected; deleted promptly upon disconnection or account deletion.
- Account data: deleted within 14 days of account closure, except where we must retain it to meet a legal obligation.
9.Your Rights
Under the GDPR, you have the right to: access your data; rectify inaccurate data; erase your data; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with your local supervisory authority.
To exercise these rights, use the in-app controls or contact us at ab@byzantine.solutions. We respond within one month.
10.Deleting Your Data
You can delete your data directly in the App using the "Delete My Data" button under Settings → Account. Using this button will:
- Delete your uploaded photos and videos and your gallery,
- Revoke and delete your stored Instagram access tokens,
- Delete your account and associated personal data,
subject to any limited retention required by law. If you need help, contact us at ab@byzantine.solutions.
11.Data Security
We protect your data using encryption in transit and at rest, access controls that limit Producer and staff access to what is necessary, secure storage of access tokens, and regular review of our security practices. No system is perfectly secure, but we work to protect your data against unauthorized access, loss, or misuse.
12.Children
The App is not intended for anyone under 16, and Instagram itself requires users to be at least 13. We do not knowingly collect data from children below the applicable age. If you believe a child has provided us data, contact us and we will delete it.
13.Changes to This Policy
We may update this policy from time to time. We will post the updated version with a revised "Last updated" date and, where changes are significant, notify you through the App or by other means.
14.Contact Us
Alexander Bokhenek, sole proprietor
Netiv haMazalot 1-4, Jerusalem, Israel
Email: ab@byzantine.solutions
Data protection contact: ab@byzantine.solutions