Aybora

Privacy Policy

Last updated: 30 September 2026

This Privacy Policy explains what personal data Aybora ("we", "us") collects when you use the Aybora app and related services (the "Service"), how we use it, who we share it with, and the choices and rights you have.

We process personal data in accordance with the Law of the Republic of Armenia "On Protection of Personal Data" and, where it applies to you, the EU General Data Protection Regulation (GDPR).

1. Data we collect

Account data. Your email address, a display name and your password. Passwords are stored only as a secure one-way hash — we never store or see them in plain text.

Business profile. The information you give us during onboarding and later, such as your business or brand name, account type, industry, description, website, Instagram handle, content pillars, brand notes, preferred content language and time zone, and brand assets you upload (for example a logo).

Your content. Ideas, notes, content plans, captions, creatives, schedules, and the photos and videos you upload or choose from your device’s photo library. We only access the specific photos and videos you select.

Connected social accounts. When you connect Instagram (through Instagram Login for Business or Creator accounts) or a Facebook Page, we receive an access token, your account ID and username, and, with your permission, the ability to publish content and read insights. We store insights about your posts, such as reach, likes, comments, saves and shares, to show you your results.

Usage and device data. When analytics is enabled, we record how the app is used — for example which screens are opened, which features are used, and errors — together with the device platform, operating system, app version, language and a random app identifier. After you sign in, this is linked to your account ID and display name.

Technical data. Our servers automatically log technical information such as IP address, request times and error details, which we use for security, rate limiting and troubleshooting.

Support. If you contact us, we keep the messages and any information you choose to share.

2. How we use your data

  • To create and secure your account and keep you signed in.
  • To provide the Service: analysing your business profile, generating plans, ideas, captions and creatives, and saving your work.
  • To publish the posts you approve or schedule to your connected accounts, and to show you their performance.
  • To enforce plan and usage limits, prevent abuse and keep the Service secure.
  • To understand how the app is used so we can fix problems and improve it.
  • To communicate with you about your account, important changes and support requests.
  • To comply with legal obligations.

We process your data to perform our contract with you (providing the Service), for our legitimate interests (security, fraud prevention and improving the Service), on the basis of your consent (for example, when you connect a social account — you can withdraw it by disconnecting), and to comply with the law.

We do not sell your personal data, we do not use it for third-party advertising, and we do not track you across other companies’ apps or websites.

3. Artificial intelligence

To generate content, we send the relevant parts of your business profile and content — for example your business description, content pillars and the idea or caption you are working on — to our AI providers: Anthropic (Claude) and, when additional capacity is needed, Google (Gemini API). These providers process the data under their API terms to return results to us. Anthropic does not use data sent through its commercial API to train its models. We do not use your content to train AI models ourselves.

4. Who we share data with

We share personal data only with service providers that help us run Aybora, and only as needed for their role:

  • Anthropic — AI content generation;
  • Google — AI content generation (Gemini API);
  • Meta Platforms (Instagram and Facebook) — publishing your approved posts and retrieving insights for accounts you connect;
  • Mixpanel — product analytics;
  • cloud hosting, database and file-storage providers — running our servers and storing your data and media.

We may also disclose data if required by law or a valid request from a public authority, to protect the rights, safety and property of Aybora, our users or others, or as part of a merger, acquisition or sale of assets, in which case this Policy will continue to protect your data.

5. International transfers

Some of our service providers are located outside the Republic of Armenia, including in the United States and the European Union. When we transfer data abroad, we rely on appropriate safeguards, such as the providers’ contractual data protection commitments.

6. How long we keep data

We keep your account data and content for as long as your account is active. When you delete your account, your account, business profile, ideas, notes, content plans, posts and connected social accounts are permanently deleted from our database straight away. Residual copies in backups, server logs and uploaded files may remain for a limited period before they are removed. Analytics data is pseudonymous and is kept only as long as it is useful for understanding and improving the Service.

We may keep limited information for longer where the law requires it or to resolve disputes.

7. Security

We protect your data with measures including encrypted connections (HTTPS), hashed passwords, encryption of stored social-account access tokens, access controls and rate limiting. On your device, your sign-in session is stored in the app’s private storage. No system is completely secure, so please use a strong, unique password.

8. Your rights and choices

Depending on where you live, you have the right to:

  • access the personal data we hold about you and receive a copy;
  • correct inaccurate data — most of it you can edit directly in the app;
  • delete your data — you can delete your account at any time in the app (Account → Delete account);
  • object to or restrict certain processing, and withdraw consent at any time;
  • receive your data in a portable format.

You can disconnect Instagram or Facebook at any time in the app, or remove Aybora’s access in your Instagram or Facebook settings. To exercise any other right, email us at support@aybora.app. We will respond within 30 days.

If you believe we have not handled your data properly, you can complain to the Personal Data Protection Agency of the Ministry of Justice of the Republic of Armenia, or to the data protection authority where you live.

9. Children

Aybora is a business tool intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will show the date of the latest version at the top, and if the changes are significant we will notify you in the app or by email before they take effect.

11. Contact

For any privacy question or request, contact us at support@aybora.app.