Last updated: September 2026
Your account email and password (stored as a salted hash, never in plain text); business details you provide during onboarding (name, location, products, markets, and similar); photos you upload for posts; and feedback you send us through the in-app feedback button (your message and the page you were on). If you use "Sign in with Google", we receive your email address and Google account ID from Google — nothing else: no password, no contacts, no other profile data. If you connect Instagram:
To generate your content strategy, calendar, and captions (via Claude, Anthropic's AI model); to generate reference photos for posts (via Together AI); to store your uploaded photos; to publish posts to Instagram on your behalf when you choose to, including posts you schedule for automatic publishing at a future time you set; and to read your account's performance metrics and recent posts as described above. We don't sell your data.
We use Anthropic (Claude) to generate content, Together AI to generate reference photos, Meta's Instagram API to publish posts and read insights and recent posts, Google for "Sign in with Google" (as described above), Resend to send account and reminder emails, Sentry to monitor for errors and crashes, PostHog for the product analytics and session recordings described below, Upstash to power the rate limiting described under Security (it briefly processes request IP addresses to count requests), and infrastructure providers (Vercel, Neon, Vercel Blob) to host the app, database, and your uploaded photos. Each processes data only as needed to provide these services.
We use PostHog to understand how Makerside is used so we can fix problems and improve it. This includes usage events (pages visited, buttons clicked, features used, whether a post published successfully) tied to your account, and session recordings of how you use the app — clicks, scrolling, and on-screen activity. Text you type into input fields is masked in recordings (you see the typing, we see asterisks), we additionally mask text that looks like an email address, and passwords are never recorded. This data is stored on PostHog's US cloud and kept under PostHog's default retention periods — session recordings expire automatically after about a month; usage events are kept longer so we can see trends over time. To opt out of analytics and recordings entirely, email hello@makerside.app and we'll disable them for your account.
We keep your data as long as your account is active. Deleting your account from your Profile page permanently removes your business profile, calendar, strategy, uploaded photos, and Instagram connection.
You can disconnect Instagram at any time from your Dashboard, which immediately and permanently deletes the connection, its access token, and any analysis Makerside learned from your posts. Removing Makerside from your Instagram account's settings does the same thing automatically. To request deletion any other way, email hello@makerside.app. None of this removes posts already published to Instagram — you'd delete those from Instagram directly.
Passwords are hashed, not stored in plain text. Sessions use signed, httpOnly cookies. We use rate limiting (via Upstash) on sensitive endpoints to reduce abuse.
You can edit or delete your business information at any time from your Profile page, disconnect Instagram at any time, and delete your account entirely, which removes all associated data.
Makerside is a business tool for market and food vendors and isn't directed at or knowingly used by children under 16.
Questions about this policy or your data? Email hello@makerside.app.