Privacy Policy
Last updated: 24 September 2026
1. Who we are and what the service does
Daily Auto Post (“the service”, “we”, “us”) is a web application operated by Weavotech. A business connects its Instagram professional account and describes its brand once (name, what it offers, logo and a few photos). Every day we then use artificial intelligence to design one post for that account — an image and a caption — from that information only. The business chooses how posts go out: with its approval (nothing is published until it approves the post) or automatically (the day’s post is published at the time it chose). It can also upload its own image and publish it with a click. Contact: yousif@weavotech.com.
2. How you sign in
You sign in through Meta’s Business Login for Instagram, on Instagram’s own website. We never see, receive or store your Instagram password. Instagram shows you the permissions we request, and you decide whether to grant them.
3. The permissions we request and what each one is used for
| Permission | What we read or do | Why |
|---|---|---|
instagram_business_basic |
Your Instagram account ID, app-scoped user ID, username, name, account type, profile picture, follower and post counts, and your most recent posts (image or thumbnail, caption, link, date). | To show you, in your dashboard, which account is connected and what it has posted, and to publish to the right account. |
instagram_business_content_publish |
Publishing single image posts with their captions to your account. | Only: (a) a daily post you approved, at its time or when you press “Publish now”; (b) if you switched on automatic mode, the day’s post at the time you chose, only if it passed our checks; (c) an image you uploaded yourself, when you press “Publish”. At most one daily post per day, within your plan. You can pause, or return to approval mode, at any time. |
We request no other permissions. We do not read your messages, comments, insights, followers’ identities or any other account data, and we never publish to any other account.
4. What we store
- Account details: your Instagram account ID, app-scoped user ID, username, name, account type and profile picture address. Follower counts, post counts and your recent posts are fetched live when you open your dashboard and are not stored.
- Access token: the token Instagram issues when you connect, stored encrypted (AES with an HMAC integrity check) and used only for the requests in section 3.
- Brand information you enter: business name, category, city, description, products or services, the facts you allow us to use (for example prices or opening hours), website, contact number, language, tone, colours, words never to use, posting days and time, time zone, and your chosen mode.
- Your logo and up to three photos, converted by us to new image files (which removes embedded metadata such as location).
- Daily posts: each generated image and caption with its status and times. Generated images are deleted once the post is published, skipped or missed, and in any case after 48 hours.
- Alert email (optional): an address you give us for post alerts, used only after you confirm it through a link we send.
- Your own drafts and publishing history: images you upload and captions you write until you publish or delete them (an uploaded image is deleted after 48 hours at most); and, for published posts, the Instagram media ID, link and time (the most recent 50).
- Plan usage: your plan, and how many posts and designs you have used in the period.
- Free-trial record: a one-way code derived from your Instagram account ID, noting that the free trial was used. It contains no ID, username or business information, cannot be turned back into your ID, and is kept after you delete your data so a trial is given once per account.
- Operational records: when each post changed state (for example “approved” or “published”), without its content. They are unlinked from your account when you delete your data.
5. Artificial intelligence and who processes your brand information
To design your posts, our generation process sends your brand information (section 4, except your email and anything from Instagram) and your photos to AI models through OpenRouter, Inc., which routes each request to the model provider (currently Anthropic, Google and OpenAI). We configure every request so that providers that store requests for training or collect prompt data are excluded, and no provider may use your information to train models. These providers may process data outside your country. Your logo is not used to create the image: our own software places it on the finished image, and that finished image (with your logo) is then sent once to an AI reviewer to check it. Your Instagram token and account data are never sent.
Every generated post is labelled: its caption ends with “Made with AI” (or the Arabic equivalent), and its image carries the standard IPTC marker for AI-generated media, which Instagram can read. Our software checks every post before it can be published — it must not contain a number, price, offer, link or claim that you did not give us — and an independent AI review checks the image. AI can still make mistakes; if that worries you, keep approval mode on.
6. Images served for publishing
To publish, Instagram must download the image from a web address, so the image is available at an address containing a long random code that is not listed or linked anywhere, until the post is published or the image is deleted (at most 48 hours).
7. Cookies
We use only strictly necessary cookies: one keeps you signed in (7 days), one protects the connect step against forgery (10 minutes), one remembers your language, and — only if you open an invitation link — one holds that invitation (7 days). We use no analytics, advertising or third-party tracking cookies.
8. How we use and share data
We use your data only to provide the service described above. We do not sell, rent or trade it, and we do not use it for advertising or profiling. We share it only with Meta/Instagram to carry out publishing, with the AI processors in section 5 to design your posts, and with authorities where the law requires it. Alert emails are sent from our own mail server.
9. Security
All traffic uses HTTPS. Access tokens, account details and your own drafts are encrypted at rest. Brand information, your logo and photos, and generated posts are stored on our server readable only by the service and by its separate generation process, which never has access to your Instagram token. The service runs as isolated processes that cannot read other services’ data on the server. Our web server keeps no access logs for this service.
10. How long we keep data, and how to delete it
We keep your data while your account is connected. You can delete it at any time:
- In Daily Auto Post: Dashboard → Disconnect and delete my data. Deletion is immediate and covers everything in section 4 except the free-trial record; a design that was being made at that moment is discarded by the generation process within a few minutes.
- In Instagram: Settings → Apps and websites, remove Daily Auto Post. Instagram notifies us and we delete your data automatically.
- By email to yousif@weavotech.com.
Deletion removes your data from the live service at once. Our daily server backups may still hold a copy for up to eight days, after which it is erased automatically; access tokens in those backups stay encrypted, and the key that decrypts them is not stored in the backups.
Full details: Data deletion instructions. Posts already published on Instagram are part of your Instagram account; delete or edit them in Instagram.
11. Your rights
You may ask us what data we hold about you, ask us to correct it, or ask us to delete it, by writing to yousif@weavotech.com. We answer within 30 days. You can change your brand information at any time in your dashboard.
12. Who the service is for
Daily Auto Post is for businesses and creators with an Instagram professional account. It is not intended for anyone under 18.
13. Changes
If we change this policy we will update this page and the date at the top. If a change affects how we use data you have already given us, we will tell you in the dashboard before it applies.