Last updated: September 26, 2026
SocialStack LLC, a Texas limited liability company ("SocialStack," "we," "us," or "our"), operates trysocialstack.com and provides social media automation services for Instagram, TikTok, and YouTube. This Privacy Policy explains what information we collect, how we use and protect it, who we share it with, and the choices you have, including how to disconnect your accounts and delete your data.
We collect information you provide directly to us or authorize us to access, including:
We use the information we collect to:
How you connect. SocialStack accesses Instagram only through Meta's official Instagram Graph API, using Facebook Login for Business. In the SocialStack portal you click "Connect Instagram with Facebook," log in to Facebook, choose the Facebook Page(s) and linked Instagram professional account(s) SocialStack may access, and review the permissions listed below. Back in SocialStack, you confirm which Instagram account(s) we will manage. You can change or remove this access at any time (see "Disconnecting" below).
Permissions we request and why. Each permission is used only for the purpose stated:
instagram_basic: read your Instagram professional account's ID, username, profile picture, follower and media counts, and list of posts, so we can confirm which account you connected, show it in your portal, and match comments and insights to the right Reel.instagram_content_publish: publish the videos you upload to SocialStack as Reels on your account, when you click "Publish now" or at the times you set in your automation schedule.instagram_manage_comments: read comments on your own posts and, as your account, reply to them and hide or delete spam, either from the SocialStack portal or through automated replies you turn on. We never comment on other accounts' content.instagram_manage_messages: show your Instagram Direct conversations in the SocialStack portal and send the replies you write, or automated replies if you turn them on, only within Instagram's 24-hour reply window. We never start conversations with people who have not messaged you, and we do not send bulk or promotional messages.instagram_manage_insights: read account and per-post metrics (such as views, reach, engagement, saves, shares, and watch time) to show your performance in the portal and to plan posting for your account.pages_show_list: list the Facebook Pages you manage, so we can find the Instagram professional account linked to each one and confirm that you manage it.pages_read_engagement: read your connected Page's name, profile picture, and linked Instagram account. Meta requires this permission for Instagram publishing, comments, messages, and insights. We do not read or store your Page's Facebook posts or followers.pages_manage_metadata: subscribe SocialStack to your Page's webhook notifications, so new Instagram comments and messages reach your SocialStack inbox, and use Meta's Instagram conversations API. We do not change any other Page settings.business_management (only if granted): if your Page or Instagram account belongs to a Meta business portfolio, read the portfolio's name and the Pages and Instagram accounts you selected in it. We do not access ad accounts or make changes to your business portfolio.People who interact with your account. Comments and messages include information about the people who send them, such as their Instagram username, Instagram-scoped ID, and message text. We use this information only to show those comments and conversations to you and to send replies on your behalf. We do not contact these people for any other purpose, sell their information, or build profiles about them.
How we use and store Meta data. We use data received from Meta only to provide and improve SocialStack's services for you. We do not sell it, use it for advertising or ad targeting, or share it with data brokers, and we never share one client's account data, comments, or messages with another client. We may use aggregated, de-identified statistics (for example, which posting times tend to perform best) to improve how SocialStack plans content. Access tokens are kept only on our servers; they are never sent to your browser or written to our logs. Account information, comments, messages, and insights are stored on our servers while your account is connected, so we can show your history and avoid sending duplicate replies. Comment and message text may be sent to our AI service providers solely to draft replies for your account (see Section 5).
Disconnecting. You can disconnect an Instagram account at any time: in the SocialStack portal, go to Settings → Instagram connection → Disconnect; or on Facebook, go to Settings & privacy → Settings → Business integrations, select SocialStack, and click Remove. Either way, SocialStack stops publishing to, replying on, and reading from that account. Disconnecting in the portal also starts deletion of that account's data (see Section 7). Removing SocialStack on Facebook does not by itself delete data we have already stored; to delete it, follow our Data Deletion Instructions.
When you connect your TikTok account, we access your account through the official TikTok API. We request the following scopes: video.publish (to upload and publish videos on your behalf), video.list (to retrieve your posting history for display in your dashboard), and user.info.basic (to verify your account identity). We store your TikTok access token securely and use it exclusively to provide our automation services. We never share your TikTok credentials or data with third parties. You may revoke access at any time through your TikTok account settings or by contacting us.
When you connect your YouTube channel, we access it through the official YouTube Data API v3. We request the following scopes: youtube.upload (to upload videos as YouTube Shorts on your behalf) and youtube.readonly (to retrieve channel information and video performance metrics). We store your YouTube OAuth token securely and use it exclusively to publish content and display analytics in your dashboard. We never share your YouTube credentials or data with third parties. Our use of YouTube API Services is subject to the YouTube Terms of Service. Google's Privacy Policy is available at policies.google.com/privacy. You may revoke our access to your YouTube data at any time through your Google Security Settings.
All payment processing is handled by Stripe. We do not store your credit card information. Stripe's privacy policy governs the handling of your payment data. You can review Stripe's privacy policy at stripe.com/privacy.
We do not sell, trade, or rent your personal information to third parties. We share information only as follows:
We implement industry-standard security measures to protect your information, including keeping access tokens server-side on access-restricted systems (never in your browser or our logs), secure HTTPS connections, and limited access controls. However, no method of transmission over the internet is 100% secure.
We retain your information for as long as your account is active or as needed to provide services. Upon cancellation, we will delete your access tokens within 30 days.
When you disconnect an Instagram account in the portal, or email hunter@trysocialstack.com from your account email with the subject "Data deletion request," we stop using the affected account right away and delete its access tokens, account information, comments, messages, and insights within 30 days. If you ask us to delete your entire SocialStack account, we also delete your profile, settings, and stored videos within 30 days. We confirm by email when deletion is complete.
We keep billing records, such as Stripe invoices and payment history, for as long as required for tax, accounting, and legal purposes, along with a record of your deletion request. Content already published to your social media accounts stays there until you remove it on that platform. Step-by-step instructions are on our Data Deletion Instructions page.
You have the right to:
To exercise any of these rights, email hunter@trysocialstack.com. We will respond within 30 days.
Our website uses a small number of cookies for basic functionality, and Google Analytics cookies to understand how visitors use the site (for example, which pages are viewed). We do not use advertising cookies or sell data to advertisers. You can block cookies in your browser settings or opt out of Google Analytics with Google's opt-out browser add-on.
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors.
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website.
If you have questions about this Privacy Policy, please contact us at:
SocialStack LLC (Texas, United States)
Email: hunter@trysocialstack.com
Website: trysocialstack.com