Dropost

Privacy Policy

Last Updated: March 3, 2026

Dropost (“we”, “our”, “the app”) is a mobile application for scheduling and publishing content to Instagram Business and Creator accounts.

Information We Collect

Instagram Account Data

When you connect your Instagram account via OAuth:

  • Instagram user ID, username, profile picture URL
  • Account type (Business/Creator)
  • Follower count, media count
  • Published media library (thumbnails and metadata)

Content You Create

  • Photos and videos you upload for publishing
  • Captions you write or generate using AI assistance
  • Scheduling preferences (dates, times)

Device Information

  • FCM device token (for push notifications, if enabled)
  • Timezone preference

How We Use Your Data

  • Publishing: To publish posts, reels, and stories to your Instagram account on your behalf
  • Grid Preview: To show your existing posts alongside planned posts
  • Scheduling: To publish your content at your chosen time
  • AI Captions: To generate caption suggestions from your images (processed via Anthropic’s Claude API)

Data Storage & Security

  • Instagram access tokens are encrypted at rest using AES-256-GCM
  • Your data is stored in a PostgreSQL database hosted on secure infrastructure
  • Media files are temporarily stored in Cloudflare R2 and deleted after publishing
  • We use HTTPS for all API communication
  • JWT tokens expire after 24 hours

Data Sharing

We do not sell, trade, or share your personal data with third parties, except:

  • Instagram/Meta: To publish content you create (via official Instagram Graph API)
  • Anthropic: Image data sent for AI caption generation (processed per their data policy, not retained)
  • Cloudflare: Media files stored temporarily in R2 storage

Data Retention

  • Your account data is retained while your account is active
  • Media files are deleted from our storage after successful publishing to Instagram
  • A 7-day lifecycle policy provides additional cleanup for any orphaned media

Data Deletion

You can delete your account and all associated data at any time:

  1. Open the app > Settings > Delete Account
  2. This permanently deletes: your profile, all posts (draft, scheduled, published records), all media files, and your encrypted Instagram token

Alternatively, contact us at roman.barzyczak@gmail.com to request account deletion.

Your Rights

  • Access: View all your data within the app
  • Deletion: Delete your account and all data via Settings
  • Disconnect: Revoke Instagram access via Instagram Settings > Apps and Websites
  • Portability: Your content remains on your Instagram account after deletion from our app

Children’s Privacy

Dropost is not intended for users under 13 years of age. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted at this URL.

Contact

For privacy inquiries: roman.barzyczak@gmail.com