Privacy policy

Last updated: November 3, 2026

This policy explains how Spooltide, operated by Mishigo OÜ ("we"), handles personal data when businesses use Spooltide to create and publish social media content.

Who is responsible

Mishigo OÜ, Estonia, is the controller of the data described here. Contact us about privacy at privacy@spooltide.com.

What we collect

• Account data: the name and email address of people who sign in to Spooltide, and their sign-in sessions.
• Connected Instagram accounts: when a business connects an Instagram professional account through Meta, we receive and store the account's ID, username and an access token. We do not receive the password.
• Content: the media, text and schedules a business uploads or approves, and the videos we render from them.
• Waitlist: if you join the waitlist on spooltide.com, your email address, when you joined and which link brought you. We use it only to send your invite and delete it on request.
• Publishing records: which posts were published to which account, when, and the link to the published post.

How we use it

We use this data only to provide the service the business asked for: rendering videos, letting the business review and approve them, and publishing approved posts to the accounts the business connected, at the times it chose. We do not use Meta data for advertising, profiling, or any other purpose, and we do not sell or share it with third parties.

Where it is stored

Data is stored with Cloudflare (database and file storage) and processed by our rendering servers. Access tokens are encrypted at rest. Voiceovers may be generated by ElevenLabs, and captions may be drafted by Anthropic; these providers receive only the text needed for that step, never access tokens.

How long we keep it

We keep connected-account data while the account stays connected. When a business disconnects an account, we stop using its token immediately and delete it. Content and publishing records are kept while the business uses Spooltide and deleted within 30 days of a deletion request or the end of the service.

Your rights

Under the GDPR you can ask to access, correct, export or delete your personal data, and object to or restrict its processing. Email privacy@spooltide.com. You can also complain to the Estonian Data Protection Inspectorate (aki.ee). See Data deletion for how to remove a connected account.

Changes

We will update this page if this policy changes and note the date above.