Privacy policy

Last updated 11 October 2026

GBP Autopilot is a service run by Palm Bay Digital Ltd (company no. 15996143, registered in England & Wales). It shares a business's own Instagram photos to that business's Google Business Profile. Contact: hello@palmbay.digital.

What we collect

When a business connects its Instagram professional account, we receive and store:

• the account's Instagram username and user IDs;
• an access token, stored encrypted (AES-256-GCM), used only to read the account's posts;
• the account's recent posts: photos, captions, post links and timestamps.

We use the instagram_business_basic permission only. We never post to Instagram, and we never access direct messages, comments, followers or personal accounts.

How we use it

For each new photo, we write a short Google Business Profile update based on the caption, and publish it with the photo to that same business's Google listing. The update is either approved by us first or published automatically, as agreed with the business. We don't sell or share Instagram data with anyone else, and we don't use it for advertising.

Processors

Data is stored with Sanity (content storage) and processed on Vercel (hosting). Captions are rewritten by an AI model (Anthropic Claude, via Vercel AI Gateway). The caption text is sent for that rewrite only, and is not used to train models. Published updates go to Google Business Profile.

How long we keep it

We keep the stored token only while the business stays connected. Unpublished drafts are kept until they are published or deleted. Posts already published to Google remain on the business's Google listing, which the business controls.

Disconnecting and deleting your data

Remove Palm Bay GBP Autopilot in Instagram → Settings → Website permissions → Apps and websites. We delete the stored token straight away, and you can request full deletion. See data deletion instructions, or email hello@palmbay.digital.

Your rights

Under UK GDPR you can ask for access to, correction of, or deletion of your data, and you can complain to the Information Commissioner's Office (ico.org.uk).