InMediaInMedia
Terms Sign in

Privacy Policy

Last updated: July 2026

Welcome to InMedia. Your privacy is important to us. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform.

1. Information We Collect

We may collect the following types of information:

  • Account data: name, email address, profile picture, and authentication information when you sign in with Google or other identity providers.
  • Profile and brand data: company name, brand details, content preferences, and settings you enter in the platform.
  • Generated content: texts, images, videos, prompts, captions, and other assets you create or upload to InMedia.
  • Payment data: billing information and transaction history processed by our payment providers. We do not store full card numbers.
  • Technical data: IP address, browser type, and cookies necessary for authentication and session management.

2. How We Use Your Information

  • To provide and operate the InMedia platform.
  • To generate AI content based on your prompts and brand settings.
  • To process payments and manage your subscription.
  • To send transactional emails (e.g., password reset, billing receipts).
  • To improve the platform through aggregated, anonymized usage analytics (only with your consent).
  • To comply with legal obligations.

3. Data Sharing

We do not sell your personal data. We may share data with trusted third-party service providers strictly to operate the platform:

  • Stripe — payment processing.
  • Amazon Web Services (AWS) — cloud infrastructure and media storage.
  • Google (Gemini) — AI content generation services. Prompts and brand settings may be processed by Google's infrastructure.
  • Google (OAuth) — optional login. If you sign in with Google, your name, email, and profile picture are shared by Google with InMedia.
  • Groq — AI-powered image analysis used when you upload images to the platform.
  • Meta (Instagram): if you connect an Instagram professional account, OAuth tokens and publishing data are exchanged with Meta's APIs so we can publish on your behalf. See Section 4 for full details. We also use Meta's analytics tools (only with your consent) to understand how users discover InMedia.
  • LinkedIn — if you connect your LinkedIn account, OAuth tokens and publishing data are exchanged with LinkedIn's API.
  • TikTok — if you connect your TikTok account, OAuth tokens and video publishing data are exchanged with TikTok's API.
  • Remotion / AWS EC2 — video generation. When you create a video, your brand settings and content data are processed on cloud render servers.

All providers are bound by data processing agreements and are not authorized to use your data for any other purpose.

4. Meta Platform Data (Instagram)

If you choose to connect an Instagram professional account (Business or Creator) to publish content through InMedia, we use the Instagram API with Instagram Login provided by Meta. In line with the Meta Platform Terms and the Meta Developer Policies, this section explains how we handle the data obtained through this integration.

Permissions we request. We ask only for the minimum permissions needed to publish on your behalf:

  • instagram_business_basic: to read your account's basic profile information (account ID, username, and account type) so we can confirm the connection and show you which account you are publishing to.
  • instagram_business_content_publish: to publish images, videos, reels, and carousels to your Instagram professional account, only when you explicitly choose to publish or schedule a post.

How we use it. Data obtained through the Instagram API is used solely to operate the publishing and scheduling features you request. We never use it for advertising, we do not sell or rent it, and we do not share it with anyone other than the infrastructure providers listed in Section 3, strictly to deliver the service.

Storage and retention. The access token issued by Meta is stored encrypted, together with the minimum account identifiers needed to keep the connection working. Tokens and connection data are kept only while your account stays connected. When you disconnect the account or delete your InMedia account, the associated tokens and Instagram data are deleted.

Revoking access. You can disconnect your Instagram account at any time in InMedia under Settings, Integrations. You can also revoke InMedia's access directly from Instagram under Settings, Apps and Websites, or, for accounts managed through Facebook, under Settings, Business Integrations.

Requesting deletion of Meta data. To have the data we obtained from Meta deleted, disconnect the account under Settings, Integrations, or email us at [email protected] with the subject "Meta data deletion". We will delete the corresponding tokens and Instagram data within 30 days and confirm when it is done.

InMedia is an independent product and is not affiliated with, endorsed by, or sponsored by Meta Platforms, Inc. Instagram and Facebook are trademarks of Meta Platforms, Inc.

5. Data Retention

We retain your account data for as long as your account is active. Generated posts and media are stored for the duration of your subscription and up to 90 days after cancellation. You may request deletion at any time (see Section 8).

6. Cookies

We use two categories of cookies:

  • Essential cookies: required for authentication (session management) and language preference. These are always active and cannot be disabled without affecting the service.
  • Analytics cookies: used to measure traffic and understand how visitors interact with InMedia (via Google Analytics). These are only set after you give explicit consent via our cookie banner.

You can change your cookie preference at any time by clearing your browser cookies or contacting us. Clearing essential cookies will sign you out of the platform.

7. Security

We use industry-standard security practices: HTTPS encryption in transit, hashed passwords, encrypted OAuth tokens, and private S3 buckets with short-lived signed URLs for media access. No system is 100% secure — if you suspect unauthorized access, contact us immediately.

8. Your Rights

Under LGPD (Brazil) and GDPR (European Union), you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your account and associated data (available directly in your account Settings).
  • Export your data in a portable format (available directly in your account Settings).
  • Withdraw consent for optional data processing (analytics cookies).
  • Object to or restrict certain processing activities.

To exercise any of these rights, use the tools in your account Settings or contact us at [email protected]

9. International Data Transfers

InMedia operates globally and uses service providers based in the United States, Canada, and the European Union. When personal data is transferred outside your country, we rely on standard contractual clauses, adequacy decisions, or equivalent safeguards to ensure appropriate protection of your data.

10. Children's Privacy

InMedia is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or via an in-app notice. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions or requests, reach us at: [email protected]

© 2026 InMedia. All rights reserved.  ·  Terms