Privacy Policy

This Privacy Policy describes how 4D Advisors(“we”, “our”, or “Content Engine”) collects, uses, and protects information when you use our content management platform at content-engine.weare-4d.com(the “Service”).

We’ve written this in plain language. If anything is unclear, email us at kate@weare-4d.com.

1. Who we are

Content Engine is operated by 4D Advisors, based in Portland, Oregon. We are the data controller for the personal information described in this policy.

2. Information we collect

Account information

When you create an account, we collect your name, email address, and any password or authentication credentials you provide. If you sign in through a third party (such as Instagram), we receive the basic profile information that service shares with us.

Instagram data (via the Instagram Graph API)

When you connect an Instagram Business or Creator account, we receive and store the following on your behalf, only to provide the features you have asked us to provide:

• Account profile: your Instagram user ID, username, account type, profile picture, follower and following counts, and biography.
• Media you have published or plan to publish: captions, hashtags, image and video assets, scheduled times, and the resulting Instagram post ID once published.
• Insights and metrics: reach, impressions, saves, shares, plays, watch time, and other performance signals returned by the Instagram API for content you own.
• Comments and mentions: when an event triggers our webhook subscription, we receive and store the comment text or mention metadata so we can surface it to you in the Service.
• Hashtag and search activity within the Service: the hashtag terms you research, so we can cache and rate-limit responses appropriately.
• Access tokens: the OAuth access token granted by Instagram, encrypted at rest and used only to call the Instagram API on your behalf.

We do notrequest, collect, or store your Instagram password. Authentication happens entirely through Instagram’s OAuth flow.

Usage information

We collect basic information about how you use the Service — pages visited, features used, error logs — to keep the platform reliable and improve it over time.

Cookies

We use a small number of cookies to keep you signed in and remember your preferences. We do not use third-party advertising or tracking cookies.

3. How we use your information

We use the data above only to:

• Provide the features you have requested.
• Schedule and publish content you have created to your connected Instagram account.
• Show you insights and notifications about your account.
• Maintain and improve the Service — including diagnosing errors and monitoring abuse.
• Communicate with you about your account, billing, and important service updates.
• Comply with legal obligations.

We do not sell your personal information. We do not share your Instagram data with advertisers, brokers, or any third party for marketing purposes.

4. How we share information

We only share data with a small set of service providers who help us run the Service. These providers are bound by contract to use your data only as we direct and to protect it. Categories include:

• Hosting and infrastructure providers (e.g., Vercel).
• Database and storage providers, where your data is encrypted at rest.
• Email delivery providers, used only for transactional messages such as account confirmations.
• Error and performance monitoring tools, configured to scrub personal identifiers where possible.

We will share information when required by law, valid legal process, or to protect the rights, property, and safety of our users or the public.

5. How long we keep your information

We keep your account information for as long as your account is active. Instagram tokens are kept for as long as you keep your Instagram account connected to Content Engine. Posts and insights are retained for the lifetime of your account so you can access historical performance.

When you delete your account or disconnect your Instagram account, related data is deleted within 30 days, except where we are required to retain it for legal or accounting purposes.

6. Your rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and associated data.
• Export a copy of your data in a portable format.
• Withdraw consent — including disconnecting Instagram at any time from your account settings.
• Object to or restrict certain processing, where applicable under local law (including the GDPR and CCPA).

To exercise any of these rights, see our Data Deletion page or email us at kate@weare-4d.com.

7. Instagram data deletion

You can disconnect your Instagram account at any time from inside Content Engine, which immediately revokes our access token and stops any further data collection.

You can also revoke our access directly from Instagram’s settings: Settings › Apps and Websites › Active.

For a full deletion of your data, follow the steps on our Data Deletion page.

8. Security

We take security seriously. All access tokens are encrypted at rest. All connections to the Service use TLS in transit. Access to production systems is limited to a small number of authorized personnel and audited.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately.

9. Children

Content Engine is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

10. International users

We are based in the United States, and your information will be processed there. By using the Service, you consent to that transfer. We apply the same standards of care regardless of where you live.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the Effective Date above. Continued use of the Service after a change means you accept the updated policy.

12. Contact

Questions, concerns, or requests under this policy: kate@weare-4d.com.