Privacy

Last updated 4 November 2026

You are handing us your shop's photos and its Instagram account. Here is exactly what happens to them, and what does not.

What we keep

• Your shop: its name, town, email address, Instagram handle, caption language, time zone, and the few details captions are written from — what you offer, what you do not, your hashtags, your logo and colour if you set them. If you work in somebody else's shop: its name, and its Instagram name if you give it.
• Your password: scrambled, never stored as you typed it. Nobody here can read it, including us. If you forget it we replace it; we cannot tell you what it was.
• Your photos and videos, and the captions written for them.
• Your Instagram connection: an access token for your own account, which lets the app post as you. Disconnect Instagram in Settings deletes it, or you can revoke it from Instagram at any time; either way the app immediately stops being able to post.
• Your Google connection, if you make one: a token for your own Google Business Profile, and which of your profiles it is for. You can disconnect it in Settings, or remove BarberPost at myaccount.google.com/permissions.

What we never keep

No card or bank details — the app takes no payments today. Nothing about your customers beyond what happens to be in a photo you chose to upload. No tracking of you around other websites, no advertising cookies, no analytics. The one cookie the app sets is the one that keeps you signed in.

Who else sees it

Only these, and only for the job named. None of them is paid to show you advertising, and none of them is sent your data to sell.

• Resend — Your email address, and only when you ask to set a new password. To deliver that one email. Nothing else the app does sends you email.
• Anthropic — Your photos and videos, and the few facts about your shop that the caption is written from. If replies to Google reviews are on: each new review’s stars and words and the reviewer’s first name. To write the four caption options — the AI looks at the photo to describe what is in it — and a suggested reply to each review.
• Meta (Instagram) — The photo or video, its caption, the access token for your own Instagram account, a customer’s Instagram name when it was added to their photo with their yes, and the Instagram name of the shop you work at when you gave it in Settings, so it is tagged on your posts. To publish the post to your account at its time. This is the whole point of the app.
• Google (Business Profile) — Only if you press Connect Google: the access token for your own Business Profile, each post’s photo and its Google text, and the replies to reviews you approve. To put each post on your Google profile too, a few minutes after it goes to Instagram, and to post a reply under a review when you tap Approve.
• Vercel — Everything, while the app is running: the site itself and the photo store. It is where the app is hosted and where photos are kept until they are posted.
• Neon — Your shop details, your email address, your scrambled password and your queue. It is the database the app keeps its records in.
• Apple and Google (phone notifications) — Only if you turn on notifications on a phone: the address your phone gave for its notifications, and the short message itself, locked so only your phone can read it. To show the morning reminder, "your post is live" and "nothing planned for tomorrow" on that phone. Turn them off on the Phone app screen at any time.
• Telegram — Your shop name, town, Instagram handle and caption language — when you first sign up. So the person running the app knows to invite you and connect your Instagram. Your email address and password are never sent.

Your Google Business Profile

Only if you press Connect Google, and only for a barbershop's account. Google asks you to allow one permission, to manage your Business Profile, and the app uses it for these things and nothing else:

• to read which Business Profiles your Google account looks after — each one's name and address — so that your posts go to the right one;
• to put each post on that profile: its photo, its Google text and a Book button;
• to add each photo, and each reel that fits Google's limits (30 seconds at most), to that profile's photos and videos, where they stay until you remove them in Google;
• to read that profile's few latest posts, only to check whether a post that was interrupted went out after all, so that nothing is posted twice;
• to read the figures Google keeps for that profile — how many people saw it, called, asked for directions, opened your website or booked — and show them to you on Stats. They are read each time you open Stats and not kept;
• if replies to reviews are switched on for your shop: once an hour in the day, to read your profile's reviews from the last 30 days that have no reply yet, and to post the reply to one of them only when you tap Approve on it. It never replies by itself, never changes or removes a review, and never writes over a reply that is already there.

To write a suggested reply, the review's stars and words and the reviewer's first name are sent to Anthropic's AI. The app keeps the same — the first name only, never the full name or photo — with the suggested reply, for 30 days at most, then deletes them. It never reads or answers your messages.

It never changes your business details, your opening hours or the photos already on your profile. It keeps a token for the connection and which profile it is for. Disconnect Google in Settings deletes both, and any reviews it is keeping, and tells Google to cancel the token; deleting your account deletes them too. Nothing received from Google is sold or used for advertising, and nothing is used to train any AI: apart from the reviews above, nothing received from Google is passed to the AI at all.

BarberPost's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Photos of your customers

A photo of your work on somebody is a photo of somebody. The app sends it to an AI to be described, and then publishes it to your Instagram. Getting your customer's permission before you upload their photo is your job, not ours — the same permission you would need to post it yourself. Captions are written never to comment on a person or name one.

The app never tags a customer by itself. If you or one of your team types a customer's Instagram name on a photo — only after the customer has said yes — the post is tagged with it, and Instagram tells that person. Only public accounts can be tagged. The name is kept only until the post goes out, or until the photo is deleted, and nothing else about the customer is ever stored.

How long it stays

A photo is deleted from the store about 24 hours after it has been posted; it lives on afterwards only on your own Instagram, where you control it. A photo you delete from the queue goes straight away, along with any caption written for it. Your shop details stay until your account is deleted, and then they go too — see deleting your data.

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete all of it. Write to hello@barberpost.com and we will answer within 30 days. If you are in the UK and you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk.

If this changes

The date at the top moves when the wording does. If a change matters — a new company seeing your photos, say — we will tell you rather than quietly editing this page.

BarberPost Ltd, 10 Flying Horse Walk, Nottingham, NG1 2HN. Registered in England and Wales, company number 17489260.