Privacy Policy
How Toolies handles account information, creator data and the content you ask us to publish.
Last updated October 3, 2026Draft for launch. Operator postal details and deployment-specific disclosures are being finalized. Operator information
01Who is responsible
Toolies is Instagram account management and publishing software. We determine how account, security and billing information is used to operate the service. When an agency supplies creator information, the agency is responsible for its authority to process that information; we use it to provide the requested service. Contact your workspace administrator for privacy questions. Ask your workspace administrator for operator details.
02Information we handle
This includes your name, email, workspace settings, password hash, session and verification records, optional two-factor authentication information, connected Instagram account identifiers, usernames, profile images and connection status. We also process uploaded media, captions, schedules, publication results, available performance metrics, usage quotas, invoices and payment transaction references. Operational systems may receive IP addresses, browser information and security logs.
03Product analytics
We measure how Toolies is used with our own analytics, stored in our database; no analytics company receives this information. No cookie is set and nothing is stored in your browser for it. For each page view we record the page (with the secret parts of links removed), the referring site, campaign tags and whether you use a desktop, tablet or phone. To count visitors without identifying them, we combine the IP address and browser into a code using a key that changes every day and is then deleted, so a visitor can't be followed from one day to the next; the IP address itself is not stored. When you are signed in, page views and a few milestones, such as signing up, connecting a creator, scheduling a post or completing a payment, are linked to your account so we can understand how the service is used. We do not record screens, clicks or what you type. Analytics records are deleted after 13 months.
04How we use it
We use this information to authenticate you, connect authorized accounts, store and publish content, display insights, allocate subscription capacity, verify payments, send service messages, resolve support requests and prevent abuse. Where applicable, the legal grounds are performance of our agreement, legal obligations and legitimate interests in operating and securing the service. Where consent is required, you can withdraw it without affecting processing that was lawful before withdrawal.
05Instagram and the official Meta APIs
Instagram features use Meta’s official APIs through authorized publishing integration providers. You authorize access on Instagram or Meta; Toolies does not ask you to provide your Instagram password. Our integration providers process the account authorizations and content required to connect accounts, publish media and retrieve available insights. Meta separately handles information under its own policies. Toolies is an independent service and is not endorsed by Meta or Instagram.
06Who receives information
Recipients include infrastructure and media-storage providers, authorized social publishing and analytics integration providers, transactional email providers, crypto payment processors and professional advisers where needed. Publishing providers receive relevant account identifiers, authorization information, media, captions and publication instructions; payment providers receive the invoice and transaction details needed to verify payment. Access by administrators is limited to operating, supporting and securing the service. We may disclose information when required by law. We do not sell personal information or use uploaded content for advertising.
07International processing
The platforms and service providers involved in hosting, publishing, messaging and payments may process data in other countries, including the United Kingdom. The applicable providers, locations and any required transfer arrangements must be confirmed for your deployment. Contact us for information about recipients and applicable safeguards; this policy does not itself create a data processing or international-transfer agreement.
08Retention and deletion
Account and workspace data remain stored while the workspace is maintained. You can delete your account yourself from Account & security: your workspace, uploads, team access, sessions and connected AI assistants are removed at once, and your name and email are erased from the records we must keep, such as invoices. Disconnecting Instagram stops the connection but does not automatically erase existing content, invoices or all historical records. We assess deletion requests against ongoing service needs, fraud prevention and applicable legal or accounting obligations. Backups and third-party systems may follow separate retention cycles. We do not promise immediate erasure from every backup. Public blockchain records and content already published to Instagram cannot be erased from those systems by deleting a Toolies record.
09Affiliate records
When you join or register through our affiliate program, we store referral attribution, accepted terms, commissions and withdrawal records. Affiliates see counts and commission references rather than referred customer contact details. Administrators can review payout addresses, payment amounts and transaction hashes. Blockchain transfers and their addresses may be publicly visible.
10Your choices and rights
You can update profile information, disconnect creators and revoke the app’s permissions through the relevant Meta or Instagram account settings. You can delete your account at any time from Account & security. For access, correction, export or other requests, contact your workspace administrator and identify the workspace concerned. We may verify your identity and authority. Depending on the laws that apply, you may also have rights to object, restrict processing, withdraw consent or complain to a data protection authority. Requests are handled within the applicable legal deadlines.
11Security, age and changes
We use measures such as password hashing, access controls and encryption for stored integration secrets. No service can guarantee absolute security. Toolies is intended for adults aged 18 or over; do not upload unlawful content or sensitive information that is unnecessary for the service. We update this page when our practices change and provide additional notice when required.