Privacy

Effective date: August 13, 2026

O.S.O. Design Lab (“O.S.O.,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, store, and delete information when using our self-hosted social-media management integration with Instagram and Meta platforms (the “Service”).

This Service is operated by O.S.O. Design Lab in Nevada, United States. Josh Hess is the data controller for information processed through the Service.

Scope
The Service is intended solely to connect and manage Instagram accounts owned or controlled by O.S.O. Design Lab and Josh Hess. It is not offered as a public service for third-party users or customers.

Information We Receive From Meta and Instagram
When an authorized Instagram account is connected, the Service may access and process the following information as permitted by the account holder and Meta:

Instagram account and profile information, such as account ID, username, profile name, profile image, account type, and associated account identifiers;
authentication credentials and access tokens required to maintain the authorized connection;
content and media the account authorizes the Service to access or publish, including images, videos, captions, hashtags, scheduled posts, and publishing status;
account analytics and insights, such as post performance, reach, impressions, engagement, and audience-related metrics made available by Meta;
comments associated with authorized account content, including commenter usernames, comment text, timestamps, and related metadata;
direct messages associated with authorized accounts, including message content, sender and recipient identifiers, timestamps, attachments, and related metadata; and
technical data necessary to operate the connection, such as API responses, error logs, and connection status.
We access only the information necessary for the features enabled in the Service.

How We Use Information
We use Meta and Instagram information only to operate the Service for O.S.O. Design Lab’s authorized Instagram accounts, including to:

publish and schedule content;
store and manage media for publishing;
view and analyze account and post performance;
view, manage, and respond to comments and direct messages;
maintain authorized connections to Meta and Instagram;
diagnose errors, secure the Service, and prevent unauthorized use; and
comply with applicable law and Meta platform requirements.
We do not use Meta or Instagram data for advertising, behavioral profiling, data brokerage, or training artificial-intelligence models.

How Information Is Stored and Shared
The Service is self-hosted on O.S.O. Design Lab’s private home network in the United States.

We do not sell, rent, trade, license, or share Meta or Instagram information with third parties. We do not use third-party advertising pixels, third-party analytics tools, or engagement-tracking services. We do not use cookies for this Instagram integration.

Information may be disclosed only if required by applicable law, legal process, or a valid governmental request, or when necessary to protect the security, rights, property, or safety of O.S.O. Design Lab, the Service, or others.

Data Retention
We retain Meta and Instagram information only for as long as reasonably necessary to operate the Service and manage authorized Instagram accounts.

If an authorized account is disconnected, access is revoked, or a deletion request is received, we will delete the Meta and Instagram information associated with that request without undue delay and no later than 30 days, except where retention is required by law or necessary to resolve a security incident, legal claim, or compliance obligation.

Backup copies, if any, are removed in the ordinary backup-rotation cycle and are not used to restore deleted information except when necessary for disaster recovery or legal compliance.

Data Deletion Requests
You may request deletion of information received from Meta or Instagram by emailing josh@osodesignlab.com with the subject line:

Meta/Instagram Data Deletion Request

Please include the Instagram username or account identifier associated with the request so we can locate the relevant information. We may request reasonable verification of account ownership or authority before completing a request.

Upon verification, we will delete the applicable Meta and Instagram information as described in this Privacy Policy and confirm completion by email.

You may also remove the Service’s access through your Facebook or Instagram account settings. Removing access prevents future access by the Service; you may still email us to request deletion of information previously received.

Security
We use reasonable administrative and technical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. No method of storage or transmission is completely secure, however, and we cannot guarantee absolute security.

Your Choices
You may revoke the Service’s access to your Meta or Instagram account at any time through the applicable Meta or Instagram account settings. You may also contact us to request access to, correction of, or deletion of information we hold, subject to applicable law.

Children’s Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children through the Service.

Changes to This Policy
We may update this Privacy Policy when our practices, the Service, or applicable law changes. We will post the updated version at the Privacy Policy URL and revise the effective date above.

Contact Us
For questions, privacy requests, or data-deletion requests, contact:

O.S.O. Design Lab
Attn: Josh Hess, Data Controller
Nevada, United States
josh@osodesignlab.com