Privacy Policy

Crously ("Crously", "we", "us") is a web app that helps you design photo carousels and publish them to your own TikTok and Instagram accounts. This policy explains what we collect, why, who we share it with, and the choices you have. Questions go to support@crously.com.

What we collect

• Your Crously account. Name, email address and a hashed password, or your Google profile (name, email and photo) if you sign in with Google.
• What you create. Carousels, captions, templates, brand settings, schedules and the images and fonts you upload or import.
• Connected TikTok accounts. When you connect TikTok, we receive your TikTok open ID, display name and access and refresh tokens, limited to the permissions you approve: user.info.basic, user.info.profile, user.info.stats, video.publish and video.upload. With those we also read your username, profile link and verified status, and your follower, like and video counts, which we show on your Accounts page and refresh about once a day. Before a post, we read your creator information (nickname, available privacy options and comment settings) to show you the posting options TikTok allows.
• Connected Instagram accounts. When you connect Instagram, we receive your Instagram professional account ID, username and access token, limited to instagram_business_basic and instagram_business_content_publish.
• Publishing results. Whether each post was published, is processing or failed, and a link to the live post when the platform gives one.
• Technical data. Session cookies that keep you signed in, a short lived cookie used while you connect an account, and server logs (such as IP address and browser type) used to keep the service secure.

We do not read your TikTok or Instagram messages, followers, other people's content or your browsing activity on those apps.

How we use it

• To run Crously: save your work, show your connected accounts and render your slides.
• To publish only the posts you created and scheduled, to the account you chose, at the time you picked. On TikTok, you choose who can see each direct post, whether comments are allowed and how it is labeled; without those choices the post goes to your TikTok drafts instead.
• To tell you what happened: in app notices when a post goes live, fails or needs you to reconnect an account, and emails for your account such as a welcome email or a password reset.
• To write slides and captions with AI when you ask it to.
• To keep the service secure and fix problems.

We do not sell your data, use it for advertising, or use data from TikTok or Instagram for any purpose other than publishing and showing your own posts.

Who we share it with

We share data only with the services that run Crously for us, and only what each one needs:

• TikTok and Instagram (Meta), to publish the posts you schedule. Their own privacy policies apply on their platforms.
• Neon (database) and Cloudflare R2 (file storage), where your account, content and slide images are stored.
• Trigger.dev, which runs our background posting jobs.
• Google Gemini and OpenAI, which receive the topics, slide text and images you send to the AI writer. Your TikTok and Instagram data is never sent to them.
• Our email provider, to send account and posting emails, and DiceBear, which draws a default avatar from your name if you have no photo.
• Authorities, if the law requires it.

How we protect it

TikTok and Instagram access tokens are encrypted before they are stored, stay on our servers and are never sent to your browser. Connections use HTTPS. Only the systems that publish your posts can read your tokens.

How long we keep it

• Your account and content stay until you delete them or delete your account.
• When you disconnect a TikTok or Instagram account in Crously, we delete its stored tokens right away. You can also remove Crously from your TikTok or Instagram app settings at any time.
• When you delete your Crously account (Settings, then Data, then Delete account), we delete your account, content, connected account tokens and uploaded files.

Your choices and rights

• Download a copy of your data from Settings, then Data.
• Edit or delete your content, disconnect accounts or delete your account at any time.
• Ask us to access, correct or delete your data by writing to support@crously.com. Depending on where you live, you may have more rights under local law, such as the GDPR or CCPA.

Children

Crously is not for anyone under 13, or under the age of digital consent where you live. We do not knowingly collect their data.

Changes

If we change this policy, we will update the date above, and tell you in the app or by email when the change is significant.