Last updated: 19 July 2026
This policy explains how Visionstack ("we", "us") handles data in our social media publishing application ("the App"). The App publishes content to social media accounts that we own and operate, and records how those posts perform.
The App is an internal business tool. It is used only by Visionstack staff to manage Visionstack's own social media presence. It is not offered to the public and has no end-user sign-up.
| Data | Why |
|---|---|
| Access tokens for social accounts we own (Instagram, Facebook Page, LinkedIn) | To publish posts to those accounts on our behalf |
| Content we create (captions, hashtags, images, video) | To publish it and to avoid repeating topics |
| Aggregate performance metrics for our own posts (likes, comments, shares, saves, reach, impressions, video views) | To measure what performs and improve future content |
To operate the App we share the minimum necessary data with:
| Provider | Purpose |
|---|---|
| Upload-Post | Publishing posts to connected platforms and retrieving post metrics |
| Meta Platforms (Instagram, Facebook) | Publishing and post insights for accounts we own |
| Publishing and post analytics for pages we own | |
| Google (Gemini API) | Generating images and video for our posts |
| Anthropic (Claude) | Generating post copy |
Each provider handles data under its own privacy policy. We do not send them personal data about your audience — only our own content and prompts.
Application data is stored in a PostgreSQL database on a private server controlled by Visionstack. Access tokens are stored server-side, restricted to the application user, and are never exposed in a browser or client application.
Published content and its performance metrics are kept while the account remains connected, because historical performance is what the system learns from. Access tokens are deleted immediately when an account is disconnected or when a deletion request is made.
You can request deletion of data associated with a connected account at any time. See our Data Deletion page for instructions and what gets removed.
Access is restricted to authorised Visionstack staff. Credentials are held in server-side environment configuration with restricted file permissions, are excluded from version control, and are redacted from application logs.
The App is a business tool and is not directed at children. We do not knowingly collect data relating to children.
If this policy changes we will update the date at the top of this page.
Questions about this policy or about data handling:
Visionstack
Email: hello@vizcommerce.com