SPROUT LABS← back home

Privacy Policy — Downlink

Last updated: July 4, 2026

Sprout Labs ("we", "us", "our") operates Downlink, a service that aggregates and displays social media content on websites we own or manage. This policy explains what data the service accesses, how we use and store it, and the choices you have.

What the service does

Downlink lets the owner of a social media account connect that account and display their own recent public posts as an embeddable feed on their websites. It is read-only: we retrieve content in order to display it, and we never post, comment, message, or modify anything on a connected account.

Information we access

When you connect an account, you authorize us — through the platform's official API and OAuth — to access only that account's own content:

  • TikTok: your basic profile (display name, avatar, user ID) and your list of public videos (video ID, title/description, cover image, share URL, and timestamp). Scopes requested: user.info.basic, video.list.
  • Instagram (Business/Creator accounts): your profile and your media — images, videos, captions, permalinks, and timestamps.
  • Facebook (Pages you manage): the Page's public posts and media.
  • Access and refresh tokens issued by the platform, which we store so the service can periodically refresh your feed.

We access only the connected account's own content. We do not collect personal information from visitors who view an embedded feed beyond what any website ordinarily logs when serving a page or image.

How we use it

  • To fetch your latest public posts on a schedule and display them as a feed on websites you own or manage.
  • To copy ("mirror") post images to our own storage so feeds keep working after the platform's temporary media links expire.

We do not use your data for advertising, and we do not sell it.

Storage and retention

  • Content metadata is stored in our database (hosted on Render). Mirrored images are stored on Cloudflare R2.
  • Access tokens are stored solely to maintain the connection and are not shared.
  • We retain your data while your account is connected. When you disconnect, or on request, we delete your stored content, mirrored media, and tokens.

Sharing

We do not sell your data or share it with third parties, except infrastructure providers that process data on our behalf (e.g., Render for hosting and database, Cloudflare for media storage). We may disclose data if required by law.

Platform compliance

Our access to and use of TikTok, Meta (Instagram and Facebook), and their user data complies with each platform's developer terms and policies. We delete platform data when you disconnect or when the platform requires it.

Your choices

  • Disconnect your account at any time to stop the service from accessing new content.
  • Request deletion of your stored data by emailing us at privacy@sprout-labs.ai.

Changes

We may update this policy; the current version, with its effective date, is always posted at this URL.

Contact

[LEGAL ENTITY NAME — TODO: fill before platform submission], [MAILING ADDRESS — TODO: fill before platform submission]
privacy@sprout-labs.ai