Privacy Policy — Layer8Culture Content Engine

Effective date: 13 June 2026

This Privacy Policy explains how the Layer8Culture Content Engine (the “Application”) handles information when it connects to social media accounts on your behalf. The Application is operated by Layer8Culture (“we”, “us”) and is a self-hosted scheduling and publishing tool built on the open-source Postiz platform, running on infrastructure we control.

1. Who this applies to

The Application is used by Layer8Culture to publish its own brand content. It is not a public, multi-tenant service. The only accounts connected are those owned or managed by Layer8Culture.

2. Information we access

When you connect an Instagram (or other social) account, we access only what is needed to schedule and publish content and report basic results:

• Your account’s public profile details (e.g. user ID, username, name, profile picture).
• An OAuth access token issued by the platform, used to publish on your behalf.
• The content you create in the Application (captions, images, scheduling times) and basic delivery / engagement metrics returned by the platform.

We do not request or store your social media password.

3. How we use it

Information is used solely to: authenticate the connected account, publish the posts you schedule, refresh access tokens so publishing keeps working, and display status and basic analytics. We do not use it for advertising or profiling.

4. How we store and protect it

Data is stored in our self-hosted database on a private server with restricted access over encrypted (HTTPS) connections. Access tokens are stored only to operate the Application and are never shared.

5. Sharing

We do not sell, rent, or trade your information. Data is shared only with the social media platform you connected (e.g. Meta/Instagram) in order to publish your content, and as required by law.

6. Retention and deletion

We keep connected-account data only while the account remains connected. You can disconnect an account at any time inside the Application, which removes its stored tokens. To request full deletion of associated data, see our Data Deletion page.

7. Your choices

You may revoke the Application’s access at any time from your Instagram / Meta account settings (Apps and Websites) or by disconnecting the channel in the Application.

8. Changes

We may update this policy. Material changes will be reflected by updating the effective date above.

9. Contact

Questions about this policy: contact@layer8culture.io