← Back

Privacy Policy

Last updated: May 14, 2026

What we collect

When you connect your Instagram account, Carougen collects and stores:

  • Instagram username and user ID
  • Post captions (full text, used for voice and style analysis)
  • Engagement metrics — like counts and comment counts
  • Post media URLs (used to fetch images for visual analysis)
  • Encrypted Instagram access token (required to read and publish posts)
  • Generated carousel content — copy, image prompts, and slide images

How we use it

Your data is used solely to operate this service — analyzing your content style and generating on-brand carousel posts. We do not sell, share, or use your data for advertising or any purpose outside of providing Carougen's features to you.

AI processing — OpenAI

We send your post captions and images to OpenAI's API for AI analysis and content generation. This includes using GPT-4o to analyze your writing voice and content style, and to generate carousel copy. It also includes using GPT-4o Vision to analyze your visual style from post images. OpenAI processes this data according to their privacy policy at openai.com/privacy.

Image processing

We temporarily fetch your Instagram post images to analyze your visual style using AI vision technology. Images are fetched server-side, converted to base64 in memory, and passed directly to OpenAI's API. Images are not permanently stored by Carougen as part of this analysis process. Generated carousel slide images are stored in Vercel Blob storage and associated with your account so you can download or publish them.

Data storage

Your account data, post cache, brand analysis profiles, and carousel drafts are stored securely in Supabase (PostgreSQL). Generated carousel slide images are stored in Vercel Blob storage. Your Instagram access token is encrypted at rest using AES-256-GCM encryption before being written to the database.

Third-party services

Carougen uses the following third-party services to operate:

  • Meta / Instagram — Instagram Graph API for reading posts and publishing carousels on your behalf
  • OpenAI — GPT-4o and GPT-4o Vision for AI analysis and content generation
  • Vercel — hosting and Blob storage for generated slide images
  • Supabase — PostgreSQL database for account data, post cache, and carousel drafts

Data retention

Your data is retained while your account is active. Specifically:

  • Instagram post cache is refreshed each time you run an analysis
  • Brand analysis profiles are retained until you re-analyze or delete your account
  • Generated carousel drafts and slide images are retained indefinitely so you can re-download them
  • Your encrypted access token is retained until you revoke access via Instagram or request deletion

You may request full deletion of all your data at any time — see our data deletion page. We will delete all associated data within 30 days.

Contact

Questions about this policy? Email support@carougen.app.