Legal

Privacy Policy

Last updated: December 15, 2025

This Privacy Policy explains how LazyPromo ("we", "us", or "our") collects, uses, and shares information when you use our app and services (the "Service").

By using LazyPromo, including signing in with Google, connecting your Instagram account, generating AI content, and scheduling or publishing posts, you agree to this Privacy Policy.

Information We Collect

  • Google account information: When you sign in with Google OAuth, we receive basic profile details such as your name, email address, account ID, and avatar URL (if available). We do not see or store your Google password.
  • Instagram account details: When you connect an Instagram account via the Meta/Instagram Graph API, we store identifiers such as your Instagram business account ID, linked Facebook Page ID, and access tokens required to publish on your behalf.
  • Generated content: Content ideas, hooks, captions, carousel text, and other AI-generated content created via OpenAI, along with any edits you make.
  • Posts, drafts, and history: Captions, media URLs, carousel slides, scheduled times, target platforms, post status (draft, scheduled, publishing, published, failed), and basic metadata about your posts.
  • Uploaded and generated media: URLs and metadata for images you upload or that are generated and stored in Supabase Storage (including file paths and storage bucket references).
  • Usage and credit information: AI credit usage (e.g. how many ideas, hooks, captions, and carousel texts you generate), monthly credit limits and remaining balance, and timestamps of AI-related actions.
  • App and analytics data: Basic usage analytics and logs such as feature usage, request timestamps, technical error logs, approximate location (based on IP), and device/browser info as provided by our hosting and analytics providers.
  • Support communications: Information you voluntarily provide when you contact support (e.g. email address, screenshots, error descriptions).

How We Use Your Information

  • To authenticate you via Google OAuth and manage your LazyPromo account.
  • To connect and maintain your Instagram account connection via Meta APIs.
  • To generate content ideas, hooks, captions, and carousel text using OpenAI based on the inputs you provide.
  • To upload, store, and retrieve media in Supabase Storage so we can preview and publish your posts.
  • To schedule, publish, and track posts on your connected social accounts.
  • To enforce AI credit limits, show you remaining credits, and prevent abuse of AI-powered features.
  • To monitor, debug, and improve the stability, performance, and UX of the app.
  • To detect and prevent abuse, fraud, or violations of our Terms of Use.
  • To respond to your support requests and communicate about your account.

Note: Please avoid including sensitive personal information (e.g. health data, government IDs, passwords) in prompts or content you generate through the Service.

How We Share Your Information

We do not sell your personal data. We share data only with service providers necessary to operate LazyPromo:

  • Google: For authentication (Google OAuth). Google processes your sign-in and provides us with basic profile information.
  • Meta / Instagram: To connect your Instagram account and publish or schedule content via the Instagram Graph API.
  • OpenAI: To generate content ideas, hooks, captions, and carousel text. We send text prompts (e.g. your app profile, content ideas, and instructions) to OpenAI and receive AI-generated responses. We do not send your access tokens or passwords to OpenAI.
  • Supabase: For our primary database and file storage (including images and related metadata).
  • Vercel: For hosting the LazyPromo web app and collecting basic runtime logs and analytics.

We may also share information if required by law, to protect our rights, or in connection with a business transaction (e.g. merger or acquisition), in which case we will take reasonable steps to notify you.

Access Tokens

When you connect Instagram, we store access tokens only as needed to keep your connection active and to publish or schedule posts on your behalf. You can disconnect your Instagram account at any time, and you may also revoke access in your Meta account settings.

Cookies & Session Data

We use cookies and/or similar technologies (including session storage) to keep you signed in, secure the Service, and remember basic preferences. You can control cookies through your browser settings, but some features may not work properly if cookies are disabled.

Data Retention

We keep your data only as long as necessary to provide the Service and for legitimate business purposes:

  • Account data, connected Instagram accounts, and post history are retained while your account is active.
  • AI-generated content, drafts, and published/failed posts are stored to provide history and functionality until you delete them or delete your account.
  • Logs and technical data may be retained for a limited period (for example, up to 12 months) for security, debugging, and analytics.

When you delete your account, we will delete or anonymize personal data that is no longer needed, subject to legal obligations to retain certain records.

Security

We use reasonable technical and organizational measures to protect your information, including HTTPS encryption, role-based access control, and secure storage of access tokens. However, no online service can guarantee absolute security.

Your Rights & Choices

  • Access and export: You can request a copy of your account data, including posts, generated content, and profile information.
  • Correction and deletion: You can edit or delete content (e.g. drafts, posts, ideas) from within the app. You can also request deletion of your account and associated personal data.
  • Disconnect Instagram: You can disconnect your Instagram account at any time from LazyPromo and/or from your Meta account settings. After disconnecting, we can no longer publish or schedule posts for that account.

To exercise your rights, please contact us at lazypromo.contact@gmail.com.

Data Deletion

You can delete your LazyPromo account (and associated posts, ideas, and settings) directly from the app in Settings → Account / Profile → Danger zone. When you confirm deletion, we permanently remove your account and related data, subject to limited retention required for security, fraud prevention, or legal obligations.

You may also request deletion of your account and associated personal data by emailing lazypromo.contact@gmail.com from the email address linked to your LazyPromo account. We may ask you to verify your identity before processing your request. We will respond and process deletion requests within a reasonable timeframe (typically within 30 days), subject to legal obligations.

Children's Privacy

LazyPromo is not intended for use by children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of the page. If the changes are material, we may provide additional notice (for example, in-app or by email).

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at lazypromo.contact@gmail.com.

You can also return to the app at /.