Privacy Policy

Last updated: 12 May 2026

Autoroll (“we”, “us”) is operated by AfriYaziMedia, 27 Stuart Rd, Rondebosch, Cape Town 7800, South Africa. This policy explains what data we collect, why, and how to delete it.

1. Data we collect

• Account data: name, email, Facebook user ID, Instagram Business/Creator account ID, linked Facebook Page ID — provided via Facebook Login when you connect your account.
• Photos you submit: images you select through the Autoroll app to be analyzed, enhanced, captioned, and posted to your Instagram account. We do not access your camera roll without your action.
• Posting metadata: captions generated, scheduled post times, post status, and the Instagram media IDs returned by Meta after publish.
• Operational logs: timestamps, error codes, IP address at OAuth time. Retained 90 days for debugging and abuse prevention.

2. Why we collect it

• To run the service you signed up for (publishing to your Instagram account on your behalf).
• To send you push notifications when curated posts are ready for approval.
• To prevent abuse and comply with Meta's Platform Terms.

3. Who we share data with

• Meta (Facebook + Instagram): we call the Graph API on your behalf using the access token you granted us via Facebook Login. Photos and captions are uploaded to Meta to create the post.
• AI providers: photos are sent to Google (Gemini) for scoring and enhancement; photos and metadata are sent to OpenAI for caption generation. Both providers act as processors — see their respective privacy policies.
• Image hosting: photos are temporarily hosted on a CDN to be ingested by the Meta Graph API. Removed within 7 days.
• Infrastructure: Render (US), Postgres database (US/EU).
• We do not sell your data and do not run advertising on it.

4. Retention

• Account data: until you delete your account.
• Submitted photos: 30 days after posting (then deleted from our storage; the published post remains on Instagram per your settings).
• Captions and post metadata: until you delete your account.
• Operational logs: 90 days.

5. Your rights

You can: access your data, correct it, export it, or delete everything. See Data Deletion for instructions. Email privacy@autoroll.online for access/export requests; we respond within 30 days.

6. Disconnecting Facebook / Instagram

You can revoke Autoroll's access at any time in Facebook → Settings → Business Integrations → Autoroll → Remove. Revocation stops all future posting and triggers data deletion per Section 4.

7. Security

Access tokens are encrypted at rest. All traffic is TLS. We do not store your Facebook or Instagram password (we never see it).

8. Children

Autoroll is not for children under 13. We do not knowingly collect data from anyone under 13.

9. Changes

Material changes will be notified by email at least 14 days before taking effect.

10. Contact

AfriYaziMedia, 27 Stuart Rd, Rondebosch, Cape Town 7800, South Africa. Email: privacy@autoroll.online.