Legal

Privacy Policy

Last updated: May 2025  ·  We keep this simple and honest

The short version

We collect only what we need to run Fybo. We never sell your data. You can delete everything at any time.

01

What We Collect

  • Your email address and display name (via Firebase Authentication)
  • Your Instagram account information: username, follower count, media count, account type
  • Post metrics: likes, comments, reach, impressions, saves, and engagement rates
  • Instagram access tokens (stored encrypted, used to operate the Service on your behalf)
  • Content you create in Fybo: scheduled posts, brand deal records, automation rules, AI-generated captions
  • Automation event logs: which automations fired, trigger text, and success/failure status
02

How We Use Your Data

We use your data exclusively to provide and improve the Service. We do not sell your data, share it with advertisers, or use it for any purpose outside of operating the Service.

  • Displaying your analytics and post performance
  • Executing automations and sending replies on your behalf via the Instagram API
  • Scheduling content to be posted
  • Generating AI captions using the content context you provide
03

Instagram Data

Fybo accesses your Instagram account through the official Instagram Graph API and Messaging API. We only request permissions necessary to operate the features you use. You can revoke Fybo's access at any time through Instagram Settings → Apps and Websites. We do not store the content of your Instagram messages beyond what is necessary to process automation triggers.

04

Data Storage and Security

Your data is stored in a MongoDB database hosted on secure infrastructure. Instagram access tokens are encrypted at rest using AES-256. We use HTTPS for all data in transit. Firebase Authentication manages your login credentials — we never store your password.

05

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and Instagram credentials within 30 days. Post metrics may be retained in anonymized form for service improvement.

06

Third-Party Services

Each of these services has its own privacy policy governing their handling of data.

  • Firebase (Google) — Authentication
  • Meta / Instagram Graph API — Instagram data and messaging
  • MongoDB Atlas — Database hosting
  • Anthropic (Claude API) — AI caption generation
07

Your Rights

You have the right to access, correct, or delete the personal data we hold about you. To request this, contact us at support@fybo.app. We will respond within 30 days.

08

Cookies

Fybo uses only session-necessary cookies for authentication state management. We do not use tracking or advertising cookies.

09

Changes to This Policy

We may update this Privacy Policy as the Service evolves. We will notify users of material changes via the app or email. Continued use of Fybo after changes constitutes acceptance.

10

Contact & Data Requests

To access, correct, or delete your data, contact us at support@fybo.app. We respond within 30 days.

© 2025 Fybo. All rights reserved.