Privacy Policy

FavStash lets you save links to social posts (Instagram Reels, TikTok, YouTube Shorts, LinkedIn posts, and public X posts), organize them, and search across what you saved. The links point at publicly available content on those platforms — we keep a pointer plus the small amount of context needed to make it searchable for you.

What we collect

• Your account. Your email address (and an optional display name) so we can sign you in and contact you about your account.
• What you save. The URLs you submit and any notes, tags, or collections you add. We also derive helper text — caption, transcript when one is available, a short summary — from each public link so you can search by meaning later.
• Connected social accounts (if you link them). If you connect an Instagram, YouTube, TikTok, LinkedIn, or X account for scheduling and supported analytics, we store the account’s ID, display name, username or connected-account email, and profile picture, plus the OAuth access tokens the platform issues. Details below under “Connected social accounts.”
• Posts you schedule. The caption, media you upload, platform settings, and publish time for each post you schedule, plus the resulting post link and platform post ID after publishing.
• Instagram comment automations (if you set them up). Your automation settings, and for each person who comments one of your keywords: their Instagram username, Instagram-scoped ID, comment text and time, and whether the automated message was sent, seen, tapped or answered. Details below under “Instagram comment automations.”
• API keys (if you create them). We store a hash of each key, not the secret itself, plus a name and last-used time.
• Standard technical logs. Things like request IDs and error messages needed to keep the service running and to investigate abuse.
• Optional usage analytics and session recordings. On the website, we ask before collecting optional analytics in the EEA, UK and Switzerland. In other configured regions, collection is enabled by default unless you choose Essential only or turn off Analytics & improvements in Cookie preferences. An unknown location requires a choice first. Your saved choice applies to the current account on that device. Mobile usage analytics still requires opt-in. Google Analytics measures visits and feature actions using an opaque account ID; we do not send it your email, captions, media, searches, or saved content. Microsoft Clarity records masked page layouts and interactions on the landing page and supported signed-in web pages. We share your verified email with Clarity as a user label and filter so authorized support staff can find your sessions and diagnose problems. Text and inputs are masked throughout the app. Sign-in, credentials, OAuth callbacks, and internal diagnostics are excluded from recording. Mobile usage analytics records semantic actions and foreground time, without screen recordings in this build. You can decline or withdraw optional collection using Cookie preferences on the website or Analytics preferences in mobile Settings. Necessary operational records of saves, social connections, billing and publishing are maintained separately to operate and troubleshoot the service. Internal account activity is retained for 30 days; daily aggregate connection snapshots for up to 400 days. Account deletion removes internal activity and the email lookup immediately. Clarity has separate retention (normally 30 days for recordings, with longer retention for selected recordings and heatmaps); its current service does not provide individual-user deletion, so withdrawing collection does not erase recordings already retained there.

Optional advertising measurement

When Advertising measurement is on, we use the Meta Pixel and Conversions API to measure visits, confirmed sign-ups, first paid subscriptions and activation milestones. This helps measure and improve our Facebook and Instagram ads. In the EEA, UK and Switzerland, or when we cannot determine your location, it stays off until you allow it. Elsewhere on the website it is on by default, separately from usage analytics, and you can turn it off in Cookie preferences.

Meta can receive event names and times, eligible page URLs, advertising click and browser identifiers, IP address and browser information, and hashed account identifiers and verified email for matching. Hashing does not make matching data anonymous. We never include saved links, notes, captions, transcripts, searches or social access tokens in these events. See Meta’s Privacy Policy.

You can withdraw using Cookie preferences. This stops future browser and server advertising reporting after the preference is saved; it does not erase information Meta already received. Advertising consent and matching context expire after 90 days. Minimal conversion markers are retained while the account exists to prevent repeat counting; account deletion disables reporting and purges these records through our account deletion workflow. Native app-install advertising attribution is not included in this integration.

What we don’t do

• We don’t sell or rent your information.
• We don’t share your saved content, captions, searches or connected-platform data with advertisers.
• We don’t use your saves to train any AI model, ours or anyone else’s.

How we use it

• To run your account and show you your stash.
• To enrich each save (transcript, short summary, search index) so you can find it later.
• To authenticate API and AI-agent requests you make against your own stash.
• To keep the service secure, prevent abuse, and comply with law.
• To understand landing-page performance and improve its content, navigation, and calls to action.

Connected social accounts

Connecting a social account is always optional and always started by you. When you connect one, the platform asks for your consent and then issues FavStash scoped OAuth tokens. Here is exactly what we do with them. See our connection and permissions guide for a short overview.

• What we access. Your basic channel profile (ID, display name, username or connected-account email, and picture), permission to publish the posts youschedule, and—where the provider exposes them—the performance metrics of your account and posts (reach, views, likes, watch time, followers, and similar). Supported channels sync owned-post details and analytics automatically after connection and periodically while connected, as well as when you request a refresh. We store post IDs, captions, links, publication times, media metadata and thumbnail URLs, and performance history for your calendar and growth charts. LinkedIn personal-profile analytics and owned-post history are not available through its self-serve API.
• What we do with it. Publish content only when you (or an AI agent you authorized) schedule it, and display analytics back to you. If you explicitly authorize an AI agent or script, we return the social-account data it requests through your FavStash API connection so it can analyze your account or carry out your instruction. We do not otherwise disclose that data. We don’t read your inbox, contacts or feed, and we don’t post without an instruction from you. The only messages FavStash handles are the ones described under “Instagram comment automations” below, and only if you turn that feature on.
• Token storage. Access tokens live in a dedicated, encrypted-at-rest datastore that only our publishing and analytics systems can read. Tokens are not returned to your browser or other users. They are sent to the issuing platform when needed for authorized requests, refresh or revocation, and deleted from the live token store when disconnection completes.
• Revoking access. Disconnect any channel from the FavStash dashboard at any time. For YouTube and X, Disconnect asks the platform to revoke FavStash’s authorization before deleting the local tokens and connected-channel record. You can also revoke FavStash from the platform side: Instagram (Settings → Website permissions → Apps and websites), Google (Google security settings), TikTok (Settings → Security → Apps), or LinkedIn (Settings & Privacy → Data privacy → Permitted services).

Successful disconnection also removes the cached account image, synced post records and growth history for that connection. It does not delete posts on the social platform, independently saved stash items, or your authored drafts and scheduled-post records. Those records and uploaded media follow the retention and deletion rules below.

Instagram comment automations

If you connect an Instagram professional account and choose to set up a comment automation, you grant FavStash two extra Instagram permissions: managing comments and managing messages. FavStash uses them only for the automations you create.

• What happens. When someone comments one of your keywords on a post you chose, FavStash sends that person one private reply from your account, as Instagram allows, and optionally replies to their comment publicly. If they tap the reply’s button or answer it, FavStash sends the link you set. FavStash doesn’t message anyone who didn’t comment first. By default the first message says it’s an automated reply and that replying “STOP” opts out; a creator who turns that line off is responsible for disclosing automated messages where the law requires it. Replying “STOP” always works: anyone who opts out gets no further automated messages from that Instagram account.
• What we receive and store. For each matching comment: the commenter’s Instagram username and Instagram-scoped ID, the comment text and time, the post it was on, and the delivery status (sent, seen, tapped, link sent, opted out, failed or expired). We read comments only on posts with an active automation, and messages only when they answer an automation message.
• Why. To send the messages you configured, to avoid messaging the same person twice, to show you each automation’s statistics, and to let you export the Instagram usernames of people who interacted with your automations (as CSV) for your own follow-up. The export doesn’t include Instagram IDs. We don’t sell this data or use it to advertise, and you may only use exported data in line with Instagram’s terms.
• Who can see it. Only you, in your FavStash account. Instagram usernames and comment text come from Instagram; Meta’s Privacy Policy governs how Instagram handles them.
• How long we keep it. Recent-activity entries are deleted after 30 days. Commenters waiting for a message are removed once Instagram’s 7-day reply window closes. Your automations and their commenter lists stay until you delete the automation, disconnect the Instagram account, remove FavStash in Instagram’s settings, or delete your FavStash account. Each of those deletes them.
• If you commented on a creator’s post. You don’t need a FavStash account to have your data deleted. Reply “STOP” to stop messages, and email contact@sketricsolutions.com with your Instagram username to have FavStash delete what it holds about you across all creators’ automations. We confirm by email once it’s done.

YouTube. FavStash uses YouTube API Services to upload the videos you schedule and to read your channel’s identity, owned-video metadata, publication status, public counters, and owner-only analytics. We also receive the Google profile information and OAuth credentials needed to identify and maintain the connection. By connecting a YouTube account you also agree to the YouTube Terms of Service; the Google Privacy Policy applies to Google’s handling of your data. FavStash’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Instagram connections use Meta’s Instagram API; Meta’s Privacy Policy governs Meta’s side. TikTok connections use the TikTok for Developers API under TikTok’s Privacy Policy. LinkedIn personal-profile connections use LinkedIn’s OpenID Connect and Share on LinkedIn products under the LinkedIn Privacy Policy; FavStash uses them for account identity and user-instructed publishing, not personal analytics or feed access. Platform data we fetch (analytics) is shown to you and cached briefly for performance. It is returned to an AI agent or script only when you have expressly authorized that client and instructed it to access your data. We don’t sell it, share it for advertising, or use it to train AI models. See Data deletion for removal instructions.

How we protect your information, including Google user data

The safeguards below apply to personal information and connected-account data that FavStash handles, including Google profile information, YouTube channel and video data, YouTube Analytics data, and Google OAuth access and refresh tokens.

• Encryption in transit. FavStash uses HTTPS/TLS for traffic between your browser or app and FavStash, between FavStash services, and between FavStash and social platform APIs.
• Encryption at rest. Account data, connected-channel metadata, scheduled posts, cached analytics, and OAuth tokens are stored using server-side encryption at rest. Provider client secrets are kept in encrypted secret storage rather than in source code.
• Token isolation and least-privilege access. OAuth access and refresh tokens are kept in a dedicated datastore separate from user-readable channel records. FavStash does not return those tokens to the browser, mobile app, other users, or connected AI clients. Only the backend functions that need a token for authorization, publishing, credential refresh, or analytics receive narrowly scoped access to that datastore.
• Authentication and account isolation. FavStash requires authenticated requests for private account features and applies owner-based authorization and server-side ownership checks so one user cannot access another user’s stash, connected channels, scheduled posts, or analytics. Personal API keys are stored as one-way hashes and can be limited by scope and revoked.
• Credential lifecycle and deletion. OAuth grants are limited to the permissions shown during consent. Disconnecting YouTube asks Google to revoke the grant and then deletes FavStash’s stored tokens and connection record. Account deletion also removes connected-account credentials and data as described under “Retention and deletion.”
• Operational controls. Direct public access to FavStash’s storage buckets is blocked, administrative access is limited to authorized personnel who need it to operate, support, or secure the service, and technical logs are used to investigate errors, security events, and abuse.

No internet service can guarantee absolute security. If we learn of a security incident affecting your personal information, we will investigate and provide notices as required by applicable law.

Service providers

We rely on a small number of trusted third parties to run the service: a cloud infrastructure provider (hosting, databases, sign-in, and in-house transcription), transcription and AI providers (for fallback extraction, visual analysis, summaries, and semantic search), and — if you subscribe — a payment processor. For website and product analytics, Google provides aggregated traffic and product-event measurement, and Microsoft provides Clarity heatmaps and session replays for the landing page. They process information only to provide their service to us and are bound by their own terms.

AI and automated processing

For public X posts you choose to save, we store available post text in your private search index. If your enrichment allowance permits, our AI provider also processes that text and your note to generate a summary, tags, and collection suggestions. We check X periodically for edits or removal and update or clear that text accordingly. If the public source cannot be verified for a day, we remove the cached X text while keeping your own link and note. We do not copy X media or capture screenshots of its preview. Loading a live X preview in the web app is optional and sends browser data to X.

When you save a link, automated systems pull what’s publicly available about it (such as a caption or available transcript) and can produce a summary plus a search index. For eligible videos, we may temporarily retrieve public audio or video for in-house transcription and select frames for visual analysis. Temporary processing files are cleaned up after the processing attempt; source videos are not offered as downloads or retained for user playback. Extracted transcripts may be cached to avoid repeating processing of the same public source.

Depending on the enrichment step, we send the public source URL, extracted text, thumbnails, or selected video frames to a transcription or AI provider. Selected frames may be staged temporarily in our storage while visual analysis or a retry completes. By default, what we send is not used to train their models. AI-generated text can be wrong — please don’t rely on it for anything consequential without checking.

If you connect Claude, ChatGPT, or any other agent to your stash, that agent acts on your instructions. Data returned to that agent is then handled by its provider under that provider’s terms and privacy policy. You control this access through your FavStash OAuth connection or API key scopes and can revoke that access at any time.

Cookies and similar storage

We use a small number of session cookies to keep you signed in and to remember your theme/UI preferences. The landing page loads Google Analytics and Microsoft Clarity, and the sign-in page and web dashboard load Google Analytics. These may set analytics cookies or use similar browser storage according to your analytics preferences. Google analytics advertising features remain disabled. Meta advertising cookies are used only after your separate advertising choice described above.

Retention and deletion

We keep your information while your account is active. You can delete individual saves from the app, disconnect any social account (which deletes its tokens immediately), or delete your whole account, which immediately removes connected-account records, tokens and synced channel data, then starts a 30-day deletion workflow for the rest of the account. A small amount of data may persist in backups or security logs for a limited period where required. Step-by-step instructions are on the Data deletion page.

Media you upload for social publishing is temporary staging data, not permanent file storage. FavStash marks each uploaded image, video, or PDF document to expire from our object storage 30 days after its most recent upload, scheduling, or rescheduling. Scheduling is limited to 21 days ahead, and scheduling refreshes that 30-day period so media is not removed before its publish time. Incomplete multipart uploads are aborted after one day. Cloud storage lifecycle deletion is asynchronous, so final removal can occur shortly after the 30-day eligibility point.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your information, and to object to or restrict certain processing. Email contact@sketricsolutions.com and we’ll handle it. EU/UK residents may also lodge a complaint with their local data protection authority.

Children

FavStash isn’t directed at children under 13 (or the age required where you live), and we don’t knowingly collect information from them.

Changes

We’ll post any updates here and refresh the “Last updated” date. For material changes we’ll notify you in the app or by email where required.

Contact

Sketric Solutions — contact@sketricsolutions.com. See also our Terms of Use.