Privacy Policy

Data we collect

Account data

Your name, email address, password (stored only as a secure hash), timezone and account settings.

Content you create

Captions, images, videos, drafts, schedules and other content you add to Alfie Post.

Data from Instagram and Facebook

When you connect accounts through Facebook Login, we receive from Meta:

• your Facebook user ID (to match deletion and disconnection requests from Meta);
• the IDs, names and profile pictures of the Facebook Pages you choose to share;
• the IDs, usernames, names and profile pictures of Instagram professional accounts linked to those Pages;
• access tokens that let us publish on your behalf;
• the IDs and links of posts we publish for you.

We use this data only to show your connected accounts in Alfie Post and to publish the content you schedule to them. We do not read your private messages, we do not sell or share Meta data with third parties for advertising, and we do not use it to build profiles of you or your audience. Access tokens are encrypted at rest.

Billing data

Payments are processed by Paddle, our merchant of record. Paddle collects your payment details directly; we never see or store your full card number. We receive your subscription status, plan and a customer reference.

Technical data

IP address, browser type and basic logs needed to keep the service secure and working. We use only essential cookies to keep you signed in — no advertising or tracking cookies.

How we use your data

• To provide the service: storing your content and publishing it when you schedule it (contract).
• To manage your subscription and send essential emails such as verification, password resets and billing notices (contract).
• To keep the service secure, prevent abuse and fix problems (legitimate interests).
• To comply with legal obligations, such as tax and accounting rules (legal obligation).

Who we share it with

We share data only with service providers that help us run Alfie Post, under contracts that protect it:

• Meta Platforms (Instagram and Facebook) — to publish the content you schedule;
• Paddle — payments, invoicing and tax;
• Railway — application hosting and database;
• Resend — transactional email.

Some providers process data outside your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

How long we keep it

• Account data and content: for as long as your account is open.
• Connected account data and tokens: until you disconnect the account, delete your account, or remove our app in your Facebook settings.
• Billing records: as long as tax law requires (typically 6–7 years), held by Paddle and us.

Deleting your data

• Disconnect any channel from the Channels page to delete its tokens and data.
• Delete your account from Settings to remove your account, workspace, channels and content.
• Remove Alfie Post from Facebook → Settings → Apps and Websites; Meta notifies us and we automatically delete the data we received through your Facebook login. See data deletion instructions.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, and to object to or restrict certain processing. To exercise these rights, email privacy@alfiepost.com. You can also complain to your local data protection authority.

Children

Alfie Post is not intended for anyone under 18, and we don't knowingly collect their data.

Changes

We'll post any changes here and, if they're significant, notify you by email.

Contact

Alfie Post Ltd, [Your registered business address]. Email privacy@alfiepost.com.