Last updated: November 5, 2026
The short version
Design Instantly is operated by Ultimate Perspective ("we", "us"). This policy explains how we handle personal information when you use designinstantly.com, app.designinstantly.com, accounts.designinstantly.com, the Design Instantly MCP server and its apps in ChatGPT, Claude and other AI assistants, our in-app AI co-worker (Otto), our Chrome extension and our free tools (together, the "Service").
Design Instantly helps ecommerce sellers turn their products into social media content. You connect your shops, we generate images, videos and captions with AI, and we publish them to the social accounts you connect.
We do not sell your personal information. We do not use your content, products, uploads or tool inputs to train AI models. We send them to AI model providers only to produce the output you ask for.
You can connect Design Instantly to ChatGPT, Claude and other assistants that support the Model Context Protocol (MCP). This section explains what happens to your data when you do.
You connect by signing in to Design Instantly and approving access (OAuth). The assistant receives an access token that expires after 1 hour and a refresh token that expires after 30 days. The assistant never sees your Design Instantly password, and we never see your password for the assistant. Every tool works only on the brands you belong to.
We receive only the inputs of the tools the assistant calls, shown in the table below, plus the token that identifies your account. We do not receive your conversation history, your other messages, your assistant account details, or files you share with the assistant, unless the assistant passes one to a tool as an input (for example, a reference image URL).
Tool results become part of your conversation. The assistant's provider handles them under its own privacy policy, for example the OpenAI Privacy Policy or the Anthropic Privacy Policy. Links to images and videos in tool results point to our content delivery network. These links are not listed publicly, but anyone who has a link can open it.
| Tool | What we receive | What we return or do |
|---|---|---|
list_brandsget_current_brand | Nothing. | The names, IDs and logos of the brands you belong to, your role in each, and which brand is active. |
switch_brand | A brand ID. | A confirmation. We save the chosen brand on your account so later tool calls use it. |
get_brand_settings | Nothing. | Your brand's custom AI caption instructions for each social platform and your TikTok privacy and interaction defaults. |
list_shops | Nothing. | Your connected shops: name, platform (Etsy, Shopify or WooCommerce), shop URL, shop ID and connection status. |
sync_shop | A shop ID. | A confirmation. We then fetch your latest products from that shop. |
list_productssearch_productsget_product | Optional search text, a shop ID, a product ID or a result limit. | Product titles, descriptions, product page URLs, status and image links. |
list_media | An optional media type and result limit. | Links to images you uploaded, with file name, file type and dimensions. |
list_channels | Nothing. | Your connected social accounts, pages and boards: names, platform and platform account IDs. Access tokens are never returned. |
list_creativesget_creative | Optional filters (type, format, limit) or a creative ID. | Your creatives: title, type, format, status, aspect ratio and links to their images or videos. |
start_generate_creative | A creative type and format. | The options that type takes and its credit cost. |
generate_creative | Product or image IDs, an aspect ratio and creative settings, such as scene or visual instructions, quote text, a voiceover script, a voice, the look of an AI-generated presenter (for example ethnicity, sex or age range), an avatar image URL, or a reference image or video (an upload ID or a web URL). It may also include a request key and a dry-run flag. | A credit quote (dry run) or a job ID. We store the request with the job, use credits, fetch any reference URL you provided, and send the inputs to AI model providers to generate the creative. |
list_jobsget_job_status | Optional filters or a job ID. | Job status and progress, the settings the job was started with, and links to the creatives it produced. |
list_posts | An optional status and result limit. | Your scheduled and published posts: scheduled and posted times, status, creative title, channel names, platform post IDs and any error messages. |
create_post | A creative ID, a date and time, a time zone and optional channel IDs. | A confirmation with post IDs. We write captions with AI and, at the scheduled time, publish the creative publicly to the social accounts you chose. |
cancel_post | A post ID. | A confirmation. The scheduled post is permanently deleted. |
delete_creative | A creative ID. | A confirmation. The creative, its media and any scheduled posts using it are permanently deleted. |
open_appcreate_app_session | The app page to open. | The Design Instantly app shown inside the conversation, signed in with a single-use link that starts a 24-hour session. |
The presenter attributes accepted by generate_creative describe an AI-generated person in the creative. They are not information about you. Tools that only read data store nothing new beyond our usual technical logs.
Remove Design Instantly from your assistant's connected apps settings at any time. To revoke every token we have issued to assistants straight away, email us at contact@designinstantly.com.
Otto is an AI co-worker that runs separately for each brand. It receives your chat messages, the app page you're on, your brand name and your time zone. It uses the same tools described in section 4, and it calls AI models through OpenRouter. Otto keeps a memory of your brand's chats and activity so its help stays consistent. Only members of that brand can use Otto. To have Otto's chats and memory deleted, email us at contact@designinstantly.com.
Chrome extension: the extension can read a website only after you allow it for that site. When you choose an image or video to recreate, it sends that media's URL and the site's address to Design Instantly to start a generation. On Pinterest and Instagram, it opens the post's page to find the video file. It also sends error reports to us.
Free tools: when you use our free tools, we process what you enter, such as a shop URL (we fetch its public products), a username to check or text to generate from. Generator inputs are sent to AI model providers. Username checks go through a network proxy provider. We use your IP address to limit how often each tool can be used.
We share personal information only as described below. Our service providers process it on our behalf. Shop, social and AI assistant platforms receive it because you connected them, and they handle it under their own privacy policies.
| Who | What they receive | Why |
|---|---|---|
| AI model providers: OpenRouter and fal.ai, which route requests to model makers such as Google, OpenAI, Anthropic, ByteDance, Kuaishou (Kling), Alibaba (Wan), Fish Audio and ElevenLabs | Instructions built from your product titles and descriptions, brand details and custom AI instructions; product, logo, reference and avatar images; voiceover scripts; and the audio of generated videos for subtitles | To generate your images, videos, captions, voiceovers and subtitles |
| Shop platforms: Etsy, Shopify and WooCommerce | Requests made with the read-only access you grant us | To import your shop and product details |
| Social platforms: Meta (Facebook and Instagram), Pinterest and TikTok | The media, captions, titles, descriptions, links, boards and post settings you schedule | To publish your posts and read their performance |
| AI assistants you connect: OpenAI (ChatGPT), Anthropic (Claude) and other MCP clients | The tool results described in section 4 | To answer your requests in that assistant |
| Hosting and infrastructure: Vercel, Google Cloud, Neon, Cloudflare, Upstash, Fly.io and Vectorize (Hindsight) | All data stored in or passing through our service, including IP addresses for rate limiting | To host, store, deliver and secure the service and to run Otto |
| Payments: Polar, Shopify Billing, AppSumo and Lemon Squeezy (older subscriptions) | Your name, email, account ID, plan, licence key, purchase details and credit usage | To take payments, manage subscriptions and track credits. These providers collect your card details. We never receive full card numbers. |
| Email and support: Courier, Loops, Chatwoot and Ghost | Your name, email, account ID, plan type (free or paid), and support messages | To send account and product emails, answer support requests and run our blog newsletter |
| Analytics and advertising: PostHog, Google Analytics and Google Tag Manager, and Meta Pixel and Conversions API | Account ID, name and email (Meta receives your email in hashed form), pages viewed, actions taken, IP address, device and browser details, cookie IDs, sign-up source and purchase value. PostHog may also record how you interact with our pages. | To understand how the product is used, improve it, and measure our advertising |
| Product tooling: Grafana Cloud, Cloudflare feature flags and Flows | Error logs, performance data, request traces, and your account ID, email and brand ID | To find and fix problems, roll out features and show onboarding guides |
Some US state laws count sharing data with advertising partners such as Meta and Google as "sharing" for targeted advertising. To opt out, email us at contact@designinstantly.com, and see the cookie controls in section 8.
| Cookie | Purpose | Duration |
|---|---|---|
| Sign-in cookies (accounts.*) and OAuth state cookies | Keep you signed in across designinstantly.com and protect shop and social connections | Up to 7 days. OAuth state cookies last a few minutes. |
| di_tz | Remembers your time zone for scheduling | About 13 months |
| di_attribution and di_signup_source | Remember how you found us (for example a campaign link) so sign-ups are attributed correctly | 30 days and 10 minutes |
| PostHog, Google Analytics (_ga) and Meta (_fbp, _fbc) | Analytics and advertising measurement | Set by those providers, typically up to 2 years |
You can block or delete cookies in your browser settings. Sign-in cookies are needed for the Service to work. You can also opt out of Google Analytics with the Google Analytics opt-out add-on and manage Meta ads in your Meta ad preferences.
| Information | How long we keep it |
|---|---|
| Account and profile | While your account is open. Deleted within 30 days of a deletion request. |
| Brand kit, uploads, creatives, generation jobs and posts | Until you delete them or ask us to delete your account. |
| Imported shop and product data | Deleted when you disconnect the shop or delete your account. |
| Social account connections | Access tokens are removed as soon as you disconnect. Account names, IDs and post history are kept until you delete your account, so your history stays accurate. |
| AI assistant (MCP) access | Access tokens expire after 1 hour and refresh tokens after 30 days. All are removed when you delete your account. |
| Sign-in sessions | 7 days, or 24 hours for the app opened inside an AI assistant. |
| Otto chats and memory | While Otto is active for your brand, or until you ask us to delete them or your account. |
| Support conversations and email contacts | While your account is open, until you unsubscribe from marketing email, or until you ask us to delete them. |
| Logs, error reports and traces | Kept for a limited period for debugging and security, then deleted automatically. |
| Analytics and advertising data | Kept under the retention settings of PostHog, Google and Meta. |
| Billing records | As long as tax and accounting law requires. |
| Backups | Removed as backups expire on our database provider's schedule. |
When you ask us to delete your account, we delete or anonymize your personal information within 30 days. That includes the files we store and the records our email, support and analytics providers hold for you. We keep only what the law requires, such as billing records.
Email contact@designinstantly.com from your account email to delete your account, get a copy of your data, correct it, revoke all AI assistant access, or opt out of advertising sharing.
Depending on where you live, you may have the right to:
To exercise any of these rights, email contact@designinstantly.com. We may need to verify your identity, and we respond within 30 days. We will not treat you differently for exercising your rights.
Where the GDPR or UK GDPR applies, we process your information to provide the Service you signed up for (contract), for our legitimate interests in securing, improving and promoting the Service, to meet legal obligations, and with your consent where the law requires it.
We use HTTPS for all connections. We encrypt the access tokens of your shops and social accounts (AES-256-GCM) and store passwords only as hashes. We limit access by brand role and use OAuth for AI assistants. No system is perfectly secure. If you believe your account has been compromised, contact us immediately.
We are based in India. Our backend runs in Google Cloud in Mumbai, India, and our other providers process data in the United States and other countries where they operate. Where the law requires it, we rely on our providers' contractual safeguards, such as Standard Contractual Clauses, for these transfers.
The Service is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has given us their information, contact us and we will delete it.
We update this policy when our practices, tools or providers change, and we change the date at the top of this page each time. If a change materially affects how we use your information, we will tell you by email or in the app before it takes effect.
Ultimate Perspective, operator of Design Instantly. For privacy questions, requests or complaints, including as our grievance contact under India's Digital Personal Data Protection Act, email contact@designinstantly.com.