Privacy Policy

1. Who we are

This Privacy Policy describes how OVRLK Labs (“we,” “us,” or “our”) collects, uses, and shares information when you use OVRLK Relay (the “Service”) — a private Instagram and Facebook scheduling and publishing tool.

Contact: hello@ovrlklabs.com · https://relay.ovrlklabs.com

2. Information we collect

Depending on how you use the Service, we may collect:

• Account information — email address, name (if provided), and authentication credentials needed to sign in.
• Meta (Facebook / Instagram) connection data — when you connect a Meta account, we receive identifiers for the Facebook Pages and Instagram professional accounts you authorize, display names, and access tokens required to publish on your behalf. Tokens are encrypted at rest.
• Content you create — captions, first comments, schedules, drafts, and media files (images/videos) you upload for publishing.
• Publish outcome data — platform post IDs, success/failure status, and error messages returned by Meta’s APIs.
• Technical data — session cookies required to keep you signed in, and standard server logs (e.g. IP address, timestamps, request paths) used for security and troubleshooting.
• Optional AI features — if you use caption or hashtag generation, the prompt text and related inputs you provide may be sent to a third-party AI provider (such as OpenAI or Google) solely to generate that content.

We do not sell your personal information. We do not run third-party advertising trackers in the Service.

3. How we use information

We use the information above to:

• Provide, operate, and secure the Service
• Authenticate you and maintain your session
• Connect to Meta platforms you authorize and publish scheduled or on-demand posts
• Store and deliver your media for publishing
• Show in-app status and notifications about publish outcomes
• Improve reliability (debugging, abuse prevention, and operational monitoring)
• Generate optional AI-assisted captions or hashtags when you request them

4. Meta platform data

When you connect Instagram or Facebook through Meta Login, we access only the permissions you grant (for example, listing Pages you manage and publishing content to those Pages / Instagram accounts). We use Meta data solely to provide the publishing features you request. We do not use Meta data for advertising, and we do not share it with unrelated third parties.

Your use of Meta products remains subject to Meta’s Privacy Policy and Meta’s Terms.

5. How we share information

We share information only as needed to run the Service:

• Meta Platforms — to authenticate connections and publish content you schedule or send.
• Infrastructure providers — hosting, database, and object storage providers that process data on our behalf (for example application hosting and Cloudflare R2 for media).
• AI providers — only when you use optional generation features, and only for that request.
• Legal requirements — if required by law, regulation, or valid legal process.

6. Cookies and sessions

The Service uses first-party session cookies to keep you signed in. These are essential for authentication and are not used for cross-site advertising.

7. Data retention

We retain account, post, and connection data for as long as your account remains active and as needed to provide the Service. Uploaded media used for publishing may be deleted after a retention period once posts are fully published. You may request deletion of your account and associated data at any time (see below).

8. Data deletion / user data removal

To delete your account and associated personal data from OVRLK Relay, email hello@ovrlklabs.com with the subject line “Data deletion request – OVRLK Relay” and the email address on your account.

We will confirm the request and delete or de-identify account data, stored media, scheduled/draft posts, and Meta connection tokens associated with your account, except where we must retain limited records for security, fraud prevention, or legal compliance. Meta may continue to store content that was already published to Instagram or Facebook according to Meta’s own policies; remove that content on-platform if needed.

You can also disconnect Meta access at any time from the Service’s accounts page and/or from your Facebook Business Integrations settings.

9. Security

We use reasonable technical and organizational measures to protect information, including encrypted storage of Meta access tokens and access controls on the Service. No method of transmission or storage is completely secure.

10. Children’s privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Service after an update means you accept the revised policy.

12. Contact

Questions about this Privacy Policy or your data: hello@ovrlklabs.com