80,000 followers is reach. 8,000 subscribers is a business.
CastCraft turns real expertise into an owned audience: list, newsletter, and welcome sequence, run entirely for you, without you having to lift a finger (outside of saying “yes, I like it”). Then we sell your courses, products, and memberships from it.
Privacy Policy
Last updated 27 August 2026. Operator: Aodhán Moran, trading as CastCraft. Contact: [email protected].
CastCraft is a content studio. We write, edit, and publish material for named clients on the platforms they already use, including Facebook Pages and Instagram professional accounts. This page covers how we handle information when a Meta app in our name is connected to those accounts.
What we collect from Meta
Only if a client (or a person they have authorised) grants our app access, we may receive:
- identifiers for the Facebook Page and linked Instagram professional account
- Page and Instagram access tokens
- content we are asked to publish (captions, images, videos, schedules)
- insights Meta already shows Page and Instagram admins (reach, engagement, follower counts, and similar metrics on that account)
- the name and user id of the person who authorised the app, so we can tell whose login produced the token
We do not request friends lists, personal timelines, or data from people who are not the authorising admin or the client’s Page / Instagram account.
How we use it
We use that information solely to do the work the client hired us for: draft and publish posts, Reels, and related content; schedule posts; and report how those accounts are performing. We do not sell it, use it to build audiences for other clients, or use it to advertise to the authorising person’s personal Facebook friends.
Where it is stored
Tokens and account ids are stored on machines we control (including a password manager / operating-system keychain) so our publishing tools can act as the Page. Media files live in the client’s working folders until they are posted. We do not send Meta tokens to unrelated third-party marketing clouds.
Sharing
Published posts appear on the client’s own Facebook Page and Instagram, which is the point of the connection. We may share reports with the client’s nominated staff. We share data with Meta only through their Graph API as required to publish or read insights. We share with authorities if the law requires it.
Retention
We keep tokens while we are actively publishing for that client, and delete or revoke them when the engagement ends or when the client asks. Posted content remains on Facebook and Instagram under the client’s account until they remove it.
Your rights and deletion
The authorising person can remove CastCraft’s access at any time in Facebook Settings under Business integrations (or Instagram’s equivalent). The client can also email [email protected] and we will delete stored tokens and local copies of unpublished media. For a standalone deletion request, see Data deletion.
Children
This app is not directed at children under 13. We do not knowingly collect their data.
Changes
If this policy changes in a material way, we will update this page and the date above.
User data deletion
This page is for people who authorised a CastCraft Meta app to access a Facebook Page or Instagram professional account.
To delete the connection and any tokens we stored:
- On Facebook, open Settings → Business integrations (or Settings → Apps and websites) and remove CastCraft.
- Email [email protected] with the subject “Meta data deletion” and the Page or Instagram handle. We will delete stored access tokens and unpublished local media for that account. We will confirm by email within 7 days.
Posts already published on the Page or Instagram stay there until the Page admin removes them. That content is the client’s, not ours.
Full policy: Privacy Policy.