Privacy Policy

Last updated: June 2026

Natipost ("we", "us") provides Intelligence-powered social media automation. This policy explains what we collect, why, how we store it, and how you can delete it.

1. What we collect

Account data — your business name, email address, password (stored only as a salted hash), and chosen plan.
Facebook & Instagram data — when you connect a page, we receive a Page access token, your Page ID and name, your Facebook user ID, and (if linked) your Instagram business account ID. We use these only to publish the content you schedule and to reply to comments on your behalf.
Content you create — topics, captions, images and posts generated or scheduled in Natipost.
Operational data — post history, basic engagement metrics returned by Facebook, and logs needed to run the service.

2. How we use it

To publish posts, reels and comment replies to the Facebook Pages and Instagram accounts you connect.
To generate captions and cards (via the Anthropic Claude API) for content you request.
To show you analytics and send you account emails (trial reminders, receipts, password resets).

We do not sell your data, and we do not use your Facebook data for advertising or any purpose other than operating the features you use.

3. Sharing

We share data only with the processors required to run the service: Meta (Facebook/Instagram Graph API), Anthropic (caption generation), our hosting and email providers (Resend), and payment processors (Stripe, SSLCommerz) when you pay. Each receives only what's needed for its function.

4. Storage & security

Data is stored on our servers with access tokens kept server-side only and never exposed to your browser. Passwords are hashed (PBKDF2). Facebook Page tokens are stored solely to operate your account.

5. Retention & deletion

You can delete your data at any time:

Disconnect your page in Settings, or remove the Natipost app from your Facebook settings — this triggers deletion of the Facebook data we hold for you.
Request full deletion at natipost.com/data-deletion or by emailing [email protected].

On deletion we remove your stored Facebook/Instagram tokens, page data and user ID. We honour Facebook's Data Deletion Callback automatically.

6. Your rights

You may access, correct or delete your data, and withdraw consent at any time by contacting [email protected].

7. Contact

Questions about this policy? Email [email protected].