Privacy Policy

Who we are

Fabulapost is an AI social media marketing manager: it helps businesses plan Instagram content, create images and videos for it, and publish it. Fabulapost is the controller of the personal data described here. You can contact us at agentagora.ai@gmail.com.

What we collect

Your account

• Your email address and password (stored by our login provider as a one-way hash), or the name and email from your Google account if you choose to sign in with Google.
• The organizations you belong to and your role in each.
• Whether your account has been approved, and when.

What you add to Fabulapost

• Brand details: names, descriptions, website address, tone of voice, colours, fonts and written guidelines.
• Files you upload, such as logos and poster images.
• Optionally, a brand ambassador: their name, a record that you confirmed they agreed to appear in your marketing, and their photos. The photos are kept in private storage, are re-saved without location or camera metadata, and are never shown publicly.
• Campaign briefs, and the ideas, images, videos, captions and hashtags generated and edited for them.

Your Instagram connection

If you connect an Instagram professional account, we receive and store its account ID, username and account type, and an access token (kept encrypted). We ask for two permissions only: instagram_business_basic (to identify the account) and instagram_business_content_publish (to publish the posts you approve). For each post we publish we keep its Instagram ID and link and its status.

We do not read your followers, messages, comments or insights, and we publish only when you press publish.

Technical data

Our servers and hosting providers keep ordinary logs (such as IP address, browser type and the time of requests) for security and to fix problems.

How we use it

• To provide the service: creating ideas and content for your brands and publishing the posts you approve.
• To run accounts: signing you in, approving new accounts, and keeping the service secure.
• To contact you about your account or a request you have made.
• To meet legal obligations and protect our rights.

We do not sell your personal data, we do not show advertising, and we do not use your content to train AI models.

Who we share it with

We use these providers to run Fabulapost. Each receives only what it needs to do its job.

• Supabase: our database, sign-in and file storage, hosted in the UK (London).
• Vercel and Render: hosting for the website and for our server and background processing.
• Anthropic (Claude): writes campaign ideas, captions and prompts from your brand details and briefs.
• Replicate and the image and video models it runs for us (for example models from ByteDance and Ideogram): generate images and videos from prompts. If you use a brand ambassador, their photos are passed to the model as short-lived links so the same person appears in your content.
• Voyage AI: turns your written brand guidelines into numeric embeddings so the most relevant ones can be found.
• Meta (Instagram): receives the posts you publish, and the sign-in when you connect your account.

We may also disclose data if the law requires it, or to a successor if our business is transferred, in which case this policy continues to apply to your data.

Cookies

We use only the cookies needed to keep you signed in. We do not use advertising or analytics cookies, so there is no cookie banner.

How long we keep data

• Your account and content are kept while your account is active.
• Your Instagram access token and account details are deleted when you disconnect Instagram, when you remove Fabulapost in your Instagram settings, or when you ask for your data to be deleted.
• When we delete data it is removed from our systems promptly; copies in our providers' backups age out on their normal schedule.
• Records of data-deletion requests (a confirmation code and what was removed) are kept so you can check the outcome.

Your choices and rights

You can ask us to give you a copy of your personal data, correct it, delete it, or restrict or object to how we use it, and where it applies you can ask for it in a portable format. In the app you can disconnect Instagram and delete brands, campaigns and generated content at any time. To delete your Instagram data, or your whole account, see how to delete your data. For any other request, email agentagora.ai@gmail.com and we will reply within 30 days. If you are unhappy with how we handle your data you can also complain to your local data protection authority.

International transfers

Some of our providers process data outside the UK and the European Economic Area, for example in the United States. Where that happens we rely on the safeguards those providers offer, such as standard contractual clauses.

Children

Fabulapost is for businesses and is not intended for anyone under 18. We do not knowingly collect data from children.

Security

Access tokens are encrypted, brand-ambassador photos are in private storage, and access to your organization is limited to its members. No system is perfectly secure, so we cannot guarantee absolute security.

Changes to this policy

We may update this policy as the service changes. The date at the top shows when it last changed, and we will tell account holders about significant changes.

Contact

Questions or requests about your data: agentagora.ai@gmail.com.