Instagram & Threads Publishing Integration
Last updated: 9 July 2026
1. Introduction
This Privacy Policy explains how the Instagram and Threads publishing integration (the “App”) operated in connection with jonassjovaag.no handles data. The App is a first-party tool that lets the site owner publish content created in the site’s own content management system (Drupal) to the owner’s connected Instagram and Threads accounts, using Meta’s official Instagram Graph API and Threads API.
Data controller: Jonas Sjøvaag. Contact: jonas@jonassjovaag.no.
2. Scope
The App is used solely by the account owner to publish their own content to their own social accounts. It is not offered as a public service and does not create accounts for, or process personal data belonging to, third-party end users. This policy is published to satisfy Meta’s Platform Terms and Developer Policies and to describe our data practices transparently.
3. Information the App accesses and stores
- Authentication data from Meta. When we connect the App to Instagram and Threads, Meta provides OAuth access tokens and basic account identifiers (for example, the Instagram Business/Creator account ID, the Threads user ID, and username). These are what allow the App to publish on our behalf.
- Content submitted for publishing. The text, images, and video we author in our Drupal CMS and choose to publish. This content is created by us and is intended for public posting.
- Publishing metadata. Identifiers and status information returned by Meta (for example, created media/post IDs, timestamps, and success or error responses), used for logging and troubleshooting.
The App does not collect information about people who view our posts, does not access followers’ or other users’ personal data, and does not read direct messages or unrelated account data.
4. How we use the information
We use the information solely to:
- authenticate with Instagram and Threads;
- publish content we create to our own connected accounts, on our instruction; and
- record the outcome of publishing actions for reliability and debugging.
We do not use the information for advertising, profiling, or any purpose unrelated to publishing our own content, and we do not sell it.
5. Legal basis for processing (GDPR)
Because the App processes the account owner’s own data to publish the owner’s own content, processing relies on our legitimate interest in operating our online presence and on the consent we grant to Meta when we authorise the connection through Meta’s login flow.
6. Storage, security and retention
- Access tokens and configuration are stored on our own server infrastructure with restricted access, and all communication with Meta’s APIs takes place over encrypted (HTTPS/TLS) connections.
- Tokens are kept only for as long as the integration is active. When access is revoked (through Meta account settings) or the App is disconnected, the associated tokens are invalidated and removed.
- Publishing logs are retained only as long as needed for operational purposes and are then deleted.
7. Sharing of information
We do not sell, rent, or share data with third parties. The only external party involved is Meta Platforms — specifically Instagram and Threads — which necessarily receives the content and authentication data required to perform publishing. Meta’s handling of that data is governed by Meta’s own privacy policies.
8. Deleting your data
You can remove the App’s access and its stored data at any time:
- Revoke access: in your Instagram, Facebook, or Threads account settings, open Apps and Websites (or Business Integrations) and remove this App. This immediately invalidates its access tokens.
- Request deletion: email jonas@jonassjovaag.no to ask us to delete any data the App holds. We will action the request within 30 days.
Because the App processes only the account owner’s own data, there are no third-party end-user records to delete.
9. Your rights (GDPR)
Where the EU/EEA GDPR applies, you have the right to access, correct, erase, restrict, or object to the processing of your personal data, and the right to data portability. To exercise any of these rights, contact jonas@jonassjovaag.no. You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
10. Cookies and analytics on this website
Separately from the publishing App, the jonassjovaag.no website uses cookies and similar technologies in three categories:
- Strictly necessary — required for the site to function (for example your shopping cart and session). These are always active and do not require consent.
- Analytics — Google Analytics 4, to understand which pages and works resonate. Set only with your consent.
- Marketing — the Meta (Facebook) Pixel, used to measure and improve reach. Set only with your consent.
Analytics and marketing cookies are not loaded until you accept them in the cookie banner shown on your first visit. You can accept or decline, and change your choice at any time via Cookie settings in the site footer; declining leaves the site fully functional. Some embedded content (for example YouTube, Vimeo, Spotify, or Bandcamp) may set its own cookies when you load it, governed by those providers. See Google’s and Meta’s privacy policies for how they process analytics and pixel data.
11. Children
The App is not directed to children and does not knowingly process children’s personal data.
12. Changes to this policy
We may update this policy from time to time. The “Last updated” date above reflects the current version.
13. Contact
Jonas Sjøvaag — jonas@jonassjovaag.no — jonassjovaag.no
This App and its use of the Instagram Graph API and the Threads API adhere to the Meta Platform Terms, the Meta Developer Policies, and applicable data-protection law, including the EU/EEA General Data Protection Regulation (GDPR).