Last updated: September 4, 2026
Introduction
Booster (“we”, “our”, “us”) is made by Union Street Studios, LLC. It connects to your Instagram professional account so you can see how the account is growing and publish content to it. The same Instagram integration powers our companion app, Mission Control. This policy explains what we collect, how we use it, and the choices you have. By using Booster or Mission Control, you agree to this policy.
Information We Collect
Phone number: Used to verify your account with a one-time SMS code and to identify your account on our servers.
Instagram account data: When you connect an Instagram professional account through Instagram’s own login, we receive an access token together with your account ID, username, account type, and counts such as followers, following, and posts. If you grant the insights permission we also receive daily follow and unfollow totals. We store these so the app can show your growth over time. We never receive or store your Instagram password.
Content you publish: If you use Booster to post to Instagram, the photo, video, or caption you choose is sent to Instagram on your behalf and is not kept on our servers after the post is made.
Device data: A push notification token if you allow notifications, plus your time zone so daily summaries land at the right time.
How We Use Information
To show you your account’s numbers and how they change each day, to write a short daily briefing about your account, to publish content you ask us to publish, and to send notifications you have opted into. We do not use Instagram data for advertising, and we do not build profiles of people other than you.
How We Share Information
We share data only with the service providers that run the app, under contracts that require them to protect it:
Vercel hosts our servers. Neon hosts our database. Anthropic generates the daily briefing from your username and follower figures; under its commercial terms it does not train on that data. Twilio delivers the SMS verification code. Apple delivers push notifications. All of them process data in the United States.
We do not sell your personal information. We may disclose data when required by law or to prevent fraud or abuse.
Data Retention and Deletion
We keep your Instagram data while your account is connected. Disconnecting Instagram inside the app immediately deletes the access token, the stored counts, and the briefings for your account. You can also revoke our access from Instagram’s settings under Apps and Websites, or email us to have everything removed. We complete deletion requests within 30 days.
Security
All traffic uses HTTPS. Access tokens are stored encrypted at rest, and your session token is kept in the iOS Keychain.
Your Rights
You can access, correct, export, or delete your data by emailing us. You can withdraw Instagram access at any time as described above.
Your rights may vary by region (e.g., EEA/GDPR, California/CCPA).
Children
Booster is not intended for children under 13, and Instagram professional accounts require you to be older still. We do not knowingly collect data from children.
Changes
We may update this policy. We will change the date above and, for material changes, tell you inside the app.
Contact
Email: [email protected]
We typically respond within 30 days.