Privacy Policy

Last updated: May 7, 2026

Storylink ("we", "the service") helps you schedule Instagram Stories, Posts, and Reels and optionally cross-post them to a linked Facebook Page. This policy explains what we collect, why, and your rights.

Identity of the data controller

Storylink is operated by Gal Ben Evgi as a sole proprietor. Gal Ben Evgi is the sole data controller for personal data processed through Storylink (no separate incorporated entity exists). Contact: admin@storylink.pro.

What we collect

• Your email address and name (from Clerk during sign-up)
• For each Instagram account you connect: the username, account ID, and an encrypted access token. You can connect up to five accounts per company.
• Images you upload — and images you generate via the AI feature — stored on Vercel Blob
• Schedule metadata for Stories, Posts, and Reels — dates, times, statuses, FB cross-post settings, and Boost campaign settings when you use Boost
• Prompts you submit to the AI generator. Prompts are passed to our AI providers (see below) for the duration of the request and are not retained by us beyond it.
• Your phone number, when you complete the optional phone-verification step during onboarding. Storage and verification SMS are handled by our authentication provider (Clerk) and an SMS provider; we use the number for verification and abuse prevention only.
• Videos you upload for Reels (and Stories that include video). Stored on Vercel Blob alongside your images.
• Contact data you upload via the customer-import feature — typically name, optional company, and an Instagram or email handle for matching audience engagement. You can delete an upload at any time.
• Anti-abuse signals — moderation events and risk counters tied to your account. We store the signal, not the content that triggered it.
• Anonymous web analytics — Vercel Web Analytics records page views and custom events without identifying cookies. We use it to measure traffic and feature usage.
• Boost campaign metadata — when you use the Boost feature, we store the linked ad-account ID, the audience configuration you set, and the spend totals reported by Meta. We do not store ad-network credentials beyond what's needed to attribute the campaign back to you.
• Aggregate counts read from your connected accounts — currently your Instagram and Facebook Page follower counts. The current value is fetched live when you open the analytics page; one daily snapshot per connection is stored on our side so the page can show how the total has changed over the selected range (7 / 30 / 90 days). Snapshots are deleted automatically when the connection is disconnected or your account is deleted.

How we use it

• To authenticate you and authorize Instagram (and optional Facebook Page) publishing on your behalf
• To publish Stories at your scheduled times
• To show you your scheduling history and account status
• To generate images and parse scheduling intent when you use the AI feature

Who we share with

• Meta — when publishing Stories to Instagram, and when cross-post is enabled, to your linked Facebook Page
• Clerk (authentication provider)
• Neon (database)
• Vercel (hosting and image storage)
• Vercel AI Gateway, OpenAI, and Black Forest Labs (BFL) — only when you use the AI feature, to interpret your prompt and generate the image. We do not include identifying account info in those requests.
• Sentry (error and crash reporting). We strip access tokens, codes, and other secrets from URLs before sending.
• Upstash (rate-limit counters keyed by your user id; no personal content is sent)
• We do not sell or share your data with advertisers or third parties beyond the providers above
• An SMS provider — only the phone number you submit during verification, only for delivering the verification code. The SMS provider is contracted by Clerk.
• Vercel Web Analytics — anonymous page views and custom events. No personally identifying data is sent.

Your rights

• Disconnect any Instagram account at any time from Settings — its token is deleted and its scheduled stories are canceled
• Request full account deletion by emailing the address below
• Export your scheduled stories on request

Questions or requests? Email us at admin@storylink.pro.