Privacy Policy

Last updated: November 13, 2026

1. Who we are

Storyst ("the Service") is operated by Eliav Afinger, a registered sole proprietor in Israel. We are the controller of your data. Contact us on WhatsApp: +972-52-4444448.

2. What the Service does

When you post a story on Instagram, the Service detects it and reposts it to your WhatsApp Status, from your own WhatsApp account, to your own contacts.

3. Information we collect

• Sign-up details: name, phone, email and Instagram username.
• From Instagram, with your permission, through Meta's official API: your account ID, username and your stories (media file, media type and time posted), plus an access token used to read them.
• From your public profile: when Instagram doesn't provide a media file (for example a story with music from Instagram's library), or to detect a link sticker, we check your public stories through a third-party provider.
• WhatsApp: you link your account to our server as a "linked device", exactly like WhatsApp Web. The server keeps the connection data this requires. For each post, your contact list is read to decide who can see the status, just as your phone does. The list is stored temporarily and deleted when the post is done.
• Payment: handled by our payment provider. We never see or store card details.

We do not use the content of your chats or pass it to anyone. If you choose to turn on extras such as auto-replies, they process incoming messages only to reply, and their records are deleted within 7 days.

4. How we use it

Only to run the Service (detect, download and repost your stories), send you service notices (for example, that a connection dropped), bill you, and support you. We do not sell data, use it for advertising, or build profiles.

5. Meta Platform Data

Data received from Instagram is used solely to provide the Service you requested, in line with Meta's Platform Terms. We do not share or sell it.

6. Processors

Cloud hosting providers, including DigitalOcean (servers in Germany); Apify (public story checks as described above); our payment and invoicing provider (Morning / Grow); and Meta (Instagram and WhatsApp, as part of the Service). Each receives only what its role requires. Beyond that, we disclose data only when the law requires it.

7. Retention

Story files are deleted from our server within hours of posting, and no later than two days. Recipient lists are deleted at the end of each post. The post log (story ID, time, result) is kept while your account is active. Sign-up and connection data are kept until you cancel and deleted within 30 days after. Invoices are kept as the law requires.

8. Security

All traffic is encrypted (HTTPS). Server access is restricted, and your access tokens are never displayed to anyone.

9. Your rights

You may access, correct or delete your data by contacting us as described in section 1. You can disconnect at any time: in WhatsApp, Settings → Linked devices → Storyst → Log out; in Instagram or Facebook, Settings → Business integrations (or "Apps and websites") → Remove. To delete all your data, see our Data Deletion page.

10. Age

The Service is intended for users aged 18 and over.

11. Changes

We will post any change on this page and notify you of material changes.