Privacy Policy
Last updated: 21 September 2026
1. Who we are
Nashrova (“the service”, “we”, “us”) is a web application operated by Weavotech. It lets a business connect its Instagram professional account, prepare a post, preview it, and publish it to that account when the business chooses to. Contact: yousif@weavotech.com.
2. How you sign in
You sign in through Meta’s Business Login for Instagram, on Instagram’s own website. We never see, receive or store your Instagram password. Instagram shows you the permissions we request, and you decide whether to grant them.
3. The permissions we request and what each one is used for
| Permission | What we read or do | Why |
|---|---|---|
instagram_business_basic |
Your Instagram account ID, app-scoped user ID, username, name, account type, profile picture, follower and post counts, and your most recent posts (image or thumbnail, caption, link, date). | To show you, in your dashboard, which account is connected and what it has posted, and to publish to the right account. |
instagram_business_content_publish |
Publishing a single image post, with the caption you wrote, to your account. | Only when you press “Publish to Instagram” on a post you have reviewed. One post per press. We never publish on our own, on a schedule, or in bulk. |
We request no other permissions. We do not read your messages, comments, insights, followers’ identities or any other account data.
4. What we store
- Account details: your Instagram account ID, app-scoped user ID, username, name, account type and profile picture address. Follower counts, post counts and your recent posts are fetched live when you open your dashboard and are not stored.
- Access token: the token Instagram issues when you connect. It is stored encrypted (AES with an HMAC integrity check) and is used only to make the requests described in section 3, on your behalf.
- Drafts: the images you upload and the captions you write, until you publish or delete the draft.
- Publishing history: for posts you published through Nashrova, the Instagram media ID, the link to the post and the time — so you can see them in your dashboard. We keep the most recent 50.
5. Your images
When you upload an image we convert it to a new JPEG file, which also removes embedded metadata such as camera details and location. To publish, Instagram must download the image from a web address, so the converted file is available at an address containing a long random code that is not listed or linked anywhere. The file is deleted as soon as the post is published, when you delete the draft, or automatically after 48 hours — whichever comes first.
6. Cookies
We use three cookies, all strictly necessary: one keeps you signed in (7 days), one protects the connect step against forgery (10 minutes), and one remembers your language. We use no analytics, advertising or third-party tracking cookies.
7. How we use and share data
We use your data only to provide the service described above. We do not sell, rent or trade it; we do not use it for advertising or profiling; and we do not use it to train artificial-intelligence models. We share it only with Meta/Instagram as needed to carry out the actions you ask for, and with authorities where the law requires it.
8. Security
All traffic uses HTTPS. Access tokens, account details and captions are encrypted at rest; uploaded images are not, because Instagram has to download them (section 5). The service runs as an isolated process that cannot read other services’ data on the server. Our web server keeps no access logs for this service; standard server security systems may briefly record the IP addresses of blocked connections.
9. How long we keep data, and how to delete it
We keep your data while your account is connected. You can delete it at any time:
- In Nashrova: Dashboard → Disconnect and delete my data. Deletion is immediate.
- In Instagram: Settings → Apps and websites, remove Nashrova. Instagram notifies us and we delete your data automatically.
- By email to yousif@weavotech.com.
Full details: Data deletion instructions. Posts already published on Instagram are part of your Instagram account; delete or edit them in Instagram.
10. Your rights
You may ask us what data we hold about you, ask us to correct it, or ask us to delete it, by writing to yousif@weavotech.com. We answer within 30 days.
11. Who the service is for
Nashrova is for businesses and creators with an Instagram professional account. It is not intended for anyone under 18.
12. Changes
If we change this policy we will update this page and the date at the top. If a change affects how we use data you have already given us, we will tell you in the dashboard before it applies.