Privacy, plainly.
Carepost plans and publishes Instagram posts for your brand. To do that it needs some information about you and your brand. This page says what, why, and who else touches it. Carepost is operated by Care Artificial Intelligence Research and Consulting LLC (“we”), the company behind carephoto.
What we store about you
- Your Google account’s name, email address and profile picture link, when you sign in. We never see your Google password.
- A name you type on your Account page, if you change the one Google gave us.
- When you signed up and when you last signed in.
What we store about your brand
- What you tell the setup assistant and what it reads from your public website: name, description, colours, tone, audience, competitors, logo and the photos you upload.
- Every post Carepost drafts for you, your edits, approvals, redo requests and the one-line reasons behind each post.
- If you connect Instagram: your account id and username, an access token so we can post for you, and the reach, saves, shares and follower counts Instagram reports for your posts.
- Your billing state: trial dates and the status of your subscription. Card numbers never reach us; Stripe keeps those.
Why we use it
- To draft, schedule and publish posts for your brand — the service you signed up for.
- To show you results and let the next week’s plan learn from them.
- To sign you in, bill you and answer when you write to us.
- Not for advertising. We don’t sell your data, build profiles of you for others, or train AI models on your brand’s content.
Who else touches it
Carepost runs on a few services, each getting only what its job needs:
- Supabase — our database, file storage and sign-in. Everything above lives here.
- Vercel and Railway — host the app and the planning engine.
- Google — sign-in. Google tells us who you are; we tell Google nothing about your brand.
- Anthropic — the AI that writes your brand profile and captions. It receives your brand description and photos’ descriptions, never your email or account details.
- Firecrawl and Brandfetch — read your public website and fetch your logo and colours during setup.
- Meta (Instagram) — publishes the posts you approved and reports how they did. Governed by Meta’s own terms.
- Stripe — payments. Stripe sees your email and what you pay; we see whether you paid.
How long we keep it
- As long as your brand is active on Carepost.
- Posts and results stay so your history and next plans make sense; you can delete any draft yourself.
- When you delete your account, everything about you and brands you alone own goes within 30 days, except invoices we must keep for tax law.
Your rights
- See, correct, export or delete your data — write to hello@carephoto.art from the address you signed up with.
- Disconnect Instagram any time from your Brand page; we drop the access token at once.
- If you’re in the EU or UK you also have the right to object or complain to your data-protection authority. We’d rather hear from you first.
Deleting your data
Email hello@carephoto.art with the subject “Delete my account”. We confirm within a few days and delete your account, your brands (if you’re their only owner), posts, photos and Instagram connection within 30 days. Instagram posts already published stay on Instagram — remove those there.
Cookies
Two, both ours: one keeps you signed in, one remembers dark or light mode. No analytics or advertising cookies.
Changes
If this page changes in a way that matters, we say so in the app before it takes effect. Questions: hello@carephoto.art.