ChalkWeek

Privacy policy

Last updated: 7 October 2026

1. What we collect

When you use ChalkWeek, we collect:

  • Account information: Your name and email address when you sign up.
  • Generated content: Posts you create using our AI tools, including platform, tone, language, and custom details you provide.
  • Usage data: How many posts you've generated and when.
  • Instagram connection: If you connect your Instagram account, we store an access token and your Instagram user ID so we can publish posts you schedule once Instagram auto-publishing launches. Auto-publishing is not live yet. We never store your Instagram password.
  • Performance notes: Any notes or analytics you manually add to your posts.
  • Brand voice: Business name, slogan, tone, and industry you save to your profile.

2. How we use your data

  • To generate AI-powered social media posts tailored to your inputs.
  • To save your post history so you can access it across sessions.
  • To auto-publish posts to Instagram on your behalf, only when you explicitly schedule and authorise a post. This feature is not live yet: today, scheduling a post sends you a reminder email instead.
  • To send email reminders for scheduled posts and weekly content digests (you can opt out at any time).
  • To improve AI output quality by referencing your top-performing posts (Pro users only).
  • To manage your subscription and account.

3. Third-party services

ChalkWeek uses the following third-party services to operate:

  • Supabase — Database and file storage. Your data is stored on Supabase infrastructure.
  • Anthropic — AI post generation for all users via Claude (Haiku). Post content is sent to Anthropic's API to generate social media posts on your behalf.
  • Meta (Facebook/Instagram) — Used to connect your Instagram account for auto-publishing, which is not live yet.
  • Resend — Email delivery for verification emails, reminders, and digests.
  • Vercel — Hosting and infrastructure.

4. Instagram data

Instagram auto-publishing is not live yet. Scheduling a post currently sends you a reminder email so you can publish it yourself. You can already connect your Instagram Business or Creator account, and if you do:

  • We store an access token that will allow us to publish posts on your behalf once auto-publishing launches.
  • We only publish content that you explicitly schedule through ChalkWeek.
  • We never read your existing Instagram posts, messages, followers, or any other data.
  • You can disconnect your Instagram account at any time from your Profile page, which immediately revokes our access.
  • Access tokens are stored securely and are never shared with third parties.

5. Data retention

We retain your data for as long as your account is active. You can delete individual posts from your history at any time.

To delete your whole account, sign in and go to Profile → Delete my account. After you confirm, we immediately erase your account, posts, saved businesses, content plans, scheduled posts and referral records, and you can't undo it. If you can't sign in, email unbanmepls96@gmail.com with the subject “Delete my account” and we'll delete everything within 7 days and confirm by email. The Data Deletion page also explains how to remove Instagram access.

6. Cookies and local storage

We use a small number of strictly necessary cookies and local storage entries to operate the service. We do not use advertising cookies, tracking pixels, or any third-party analytics cookies.

Cookies we set:

NamePurposeTypeExpires
sb-<project>-auth-tokenKeeps you signed inEssential30 days
pg_cookie_consentRemembers your cookie preferenceFunctional1 year

Because we only use cookies that are strictly necessary to deliver the service you have requested, these cookies do not require your consent under the ePrivacy Directive. However, we display a cookie notice so you are always fully informed. You may block cookies in your browser settings, but this will prevent you from staying signed in.

We also use localStorage in your browser to store preferences (e.g. onboarding status, cookie consent choice). This data never leaves your device and is not sent to our servers.

7. Your rights

You have the right to:

  • Access the data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Disconnect any third-party integrations (Instagram) at any time

To exercise any of these rights, contact us at unbanmepls96@gmail.com.

8. Security

We use industry-standard security practices including encrypted connections (HTTPS), hashed passwords, and secure token storage. We do not sell your data to any third party.

9. Contact

If you have questions about this Privacy Policy, contact us at unbanmepls96@gmail.com.