Privacy Policy

Last updated August 2, 2026

Nordpost (“we”, “us”) builds Instagram carousels for Canadian small businesses. This page explains what we collect, why, and how you can control it. Nordpost is designed and operated in Canada and follows the Personal Information Protection and Electronic Documents Act (PIPEDA).

1. What we collect

  • Account details you give us: name, business name, email, and a hashed password.
  • Brand inputs: colours, fonts, tone, industry, audience, and keywords used to generate on-brand carousels.
  • Instagram account info once you connect it: your handle, follower count, and — for live publishing — the access token issued by Meta's Instagram Login.
  • Content and usage data: the posts we generate, your ratings and recommendations, and performance metrics (reach, engagement) once a post is published.

2. How we use it

To generate and schedule carousels on your behalf, publish them to the Instagram account you connected, show you analytics, and improve future carousels using your ratings and recommendations. We never publish anything you haven't approved.

3. What we share, and with whom

We share the minimum needed to run the product: your carousel images and caption go to Meta/Instagram at the moment of publishing, and our infrastructure providers (hosting and database) process data on our behalf under standard processing terms. We do not sell personal information, and we do not share your data with advertisers.

4. Retention

We keep your account and post history for as long as your account is active. If you delete your account, or disconnect Instagram through Meta, we delete the associated posts and access tokens as described below.

5. Data deletion requests

If you remove Nordpost from your Instagram account via Meta's Business Integrations settings, Meta notifies us automatically and we erase that account's posts and stored access token within our next processing cycle. You'll get a confirmation code from Meta referencing this page.

To delete your Nordpost account and all associated data directly, email privacy@thenordpost.ca from your account's email address. We confirm deletion within 30 days.

6. Cookies

We use a single essential, httpOnly session cookie to keep you signed in. We don't use tracking or advertising cookies.

7. Your rights

You can access, correct, export, or delete your data at any time from Settings, or by emailing us. If you're not satisfied with how we've handled a request, you can complain to the Office of the Privacy Commissioner of Canada.

8. Changes to this policy

If we make a material change, we'll email the address on your account and update the date at the top of this page.

9. Contact

Questions about this policy: privacy@thenordpost.ca