Privacy Policy
How Alprints handles your information and the social accounts you connect to it.
Last updated 26 September 2026
Who we are
Alprints is a social media scheduling service operated by Alprints Solutions. The service is available at https://app.alprints.com. In this policy, "we" and "us" mean Alprints Solutions, and "you" means the person or organisation using the service.
We are the data controller for the information described below. We run our own installation of the open-source Postiz platform on infrastructure we control. Your data is not shared with the operators of Postiz Cloud.
What we collect
Account information
Your name, email address and a cryptographic hash of your password (we never store the password itself). If you sign in through a third-party provider, we receive the identifier and email address that provider gives us.
Content you create
The posts, captions, images, videos, schedules and comments you create in the service, together with any drafts or approval notes you or your collaborators add.
Connected account data
Access tokens and account identifiers for the social platforms you connect, plus the display name and profile picture of each connected account or Page so we can show you which is which. This is described in detail below.
Performance data
Metrics the social platforms return about content published through us — impressions, reach, engagement and similar — so we can show you how your posts performed.
Billing information
None at present. Alprints is currently free, so we do not ask for payment details and hold no billing records. If we introduce paid plans, card details will be handled entirely by a payment processor and will never reach our servers, and we will update this policy before any charge is made.
Technical information
Server logs containing IP address, browser user agent and timestamps, kept for security and troubleshooting.
Social accounts you connect
The service only works if you let it act on your behalf on platforms such as Facebook, Instagram, X, LinkedIn and others. You do this through each platform's own authorisation screen. We never ask for, and you should never give us, your password for any social platform.
When you authorise a connection, the platform issues us an access token. We store that token, encrypted, and use it solely to carry out actions you have asked for. We request the narrowest set of permissions that makes the features work.
Facebook and Instagram permissions
For Facebook Pages and Instagram accounts we request the following, and use them only as described:
| Permission | Why we need it |
|---|---|
pages_show_list | To list the Pages you manage so you can choose which ones to connect. |
pages_manage_posts | To publish and schedule the posts you create, at the times you choose. |
pages_manage_engagement | To post replies to comments on your Page when you ask us to. |
pages_read_engagement | To show you comments and reactions on the content you published. |
read_insights | To show you performance analytics for that content. |
business_management | To find Pages you manage through a Meta Business portfolio. |
We do not read your personal profile, your friends list, your private messages, or any Page you have not explicitly connected. We do not scrape platforms or use unofficial APIs — every action goes through the platform's official interface.
How we use your information
- To publish and schedule the content you create, to the accounts you connect.
- To show you analytics for that content.
- To operate your account, including sign-in and account recovery.
- To send service messages such as publishing failures or security notices.
- To take payment, if you are on a paid plan.
- To investigate abuse, debug faults and keep the service secure.
We do not sell your information. We do not use your content to train machine learning models, and we do not share it with advertisers.
Who we share it with
We share information only with the service providers we need to run the platform, and only to the extent they need it:
| Provider | What they do for us |
|---|---|
| Cloudflare | DNS, TLS and CDN for our domains, and email routing |
| The social platforms listed above | publishing and analytics, at your direction |
We may also disclose information where we are legally required to, or where it is necessary to protect our rights or the safety of others. If we are ever involved in a merger or acquisition, we will tell you before your information becomes subject to a different privacy policy.
Where your data is stored
Your account data, your uploaded media and your scheduled content are stored on hardware we own and operate ourselves, not on rented cloud storage. Because the social platforms we connect to operate globally, publishing your content necessarily transfers it to those platforms in the regions where they operate.
How long we keep it
- Account and content data — for as long as your account is open, and for 30 days after you close it, after which it is permanently deleted.
- Access tokens — until you disconnect the account or close your account, whichever is sooner. Disconnecting deletes the token immediately.
- Server logs — up to 90 days.
- Billing records — as long as tax and accounting law requires, typically several years, even after your account is closed.
Your rights
Depending on where you live, you may have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. You can exercise any of these by emailing contact@alprints.com. We will respond within 30 days.
You can withdraw a connected account's authorisation at any time, either inside Alprints or from the social platform's own settings. That stops us acting on that account immediately.
Deleting your data
Full instructions, including how to remove data we hold from Facebook, are on our data deletion page.
Security
Access tokens are encrypted at rest. All traffic to the service is served over HTTPS. Access to production systems is limited to the people who need it. No system is perfectly secure, but if a breach ever affects your personal data we will notify you and any relevant regulator without undue delay.
Cookies
We use cookies that are strictly necessary to run the service — keeping you signed in and protecting against cross-site request forgery. We do not use advertising or cross-site tracking cookies.
Changes to this policy
If we make a material change we will update the date at the top of this page and, where the change meaningfully affects you, notify you by email before it takes effect.
Contact us
Questions about this policy, or about your data, go to contact@alprints.com.