Privacy Policy

Data we collect

• Your Feedframer account: name, email address, a hashed password, two-factor authentication settings, your plan and your API key.
• Connected Instagram accounts: when you connect an Instagram professional account through Instagram's login, we receive an access token and, via the Instagram API, the account's ID, username, name, biography, website, profile picture and follower, following and media counts.
• Instagram posts: captions, alt text, media type, image and video files, permalinks, publish times, like and comment counts and, where you request them, comments.
• Billing: if you upgrade, Stripe processes your payment. We keep your Stripe customer and subscription IDs; we never see or store your full card number.
• Support messages you send us through the contact form or by email.
• Technical data: IP address, browser details, request logs and error reports, and a small number of cookies for sign-in, security and interface preferences (such as theme and sidebar state).

How we use it

• To run the service: fetch and cache posts from the Instagram accounts you connect, refresh their access tokens, and return that content through your API endpoints and feeds.
• To manage your account, take payment and enforce plan limits.
• To email you about your account, such as verification, password resets and warnings that an Instagram connection has expired.
• To answer support requests, keep the service secure and fix errors.
• To understand how the website is used, through Google Analytics.

We use Instagram data only to provide the service to the account holder who connected it. We do not sell it, use it for advertising, or build profiles from it.

Who we share it with

We use these providers to run Feedframer. Each processes data only as needed to provide its service to us:

• Meta (Instagram API), to fetch the data you authorise.
• DigitalOcean, which hosts our servers and database.
• Amazon Web Services (S3, London), which stores cached images and videos.
• Cloudflare, which sits in front of the site and API and delivers cached media.
• Stripe, for payments.
• Postmark, for account emails.
• Sentry, for error reporting.
• Google Analytics, for website analytics.

Content you choose to publish through your API key or RSS feed is available to anyone you give that key or feed URL to. We may also disclose data where the law requires it.

How we protect it

Instagram access tokens are encrypted at rest. All traffic to Feedframer uses HTTPS, and access to our servers is restricted.

How long we keep it

We keep your account data for as long as your account is open. When you disconnect an Instagram account we stop fetching from it and remove it from your dashboard and API. When you delete your Feedframer account, we delete your account along with its connected Instagram accounts and stored posts. To have everything we hold removed, including cached media files, email us (see below). Server logs and backups roll over and are not kept indefinitely.

Deleting your data

• Delete your whole account from Settings → Profile → Delete account.
• Disconnect a single Instagram account from your dashboard. This stops all fetching for it.
• Remove Feedframer from your Instagram account under Settings → Apps and websites. This stops us fetching new data straight away.
• Or email [email protected] from your account's email address and we will delete your data within 30 days.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict how we use it. Email us to use any of these rights. If you are in the UK or EU, you can also complain to your data protection authority, such as the UK Information Commissioner's Office.

Children

Feedframer is a developer tool and is not intended for anyone under 16.

Changes

We will update the date at the top of this page when we change this policy, and email account holders about significant changes.