Privacy Policy

Updated 26 October 2026. Instatools in the browser is built so your work stays on your device. The API stores only what it needs to run keys, quota, and billing.

Who we are

Instatools is operated by Blacnova Development. Contact: nic@blacnova.net. Site: useinstatools.com.

The browser app

Design, photos, headlines, and export run in your browser. We do not upload your images or design JSON to Instatools servers when you create or download a post. Saved layouts live in this browser on this device.

You can use Instatools without an account.

API account

If you open an API account we store:

• The email you submit
• A hashed copy of the API key (not the raw key)
• Hashed login and dashboard session tokens in Cloudflare KV
• Plan, usage counts, and saved API designs you create over the API

We email login links and keys from Blacnova Development (nic@blacnova.net) using Brevo. There is no password. Do not send secrets in any form on this site.

Billing

If you upgrade to Pro, Stripe processes the payment. We store your plan, Stripe customer id, and subscription id so quota can follow the subscription. Stripe also stores the card and invoices. Cancel in the Stripe billing portal. Access stays Pro until the paid period ends, then the key drops back to the free cap.

Renders

API PNG renders run on a Cloudflare Worker with a headless browser. Image URLs in your JSON are fetched to draw the layout. We do not keep the PNG after the response is sent.

Analytics

We use Cloudflare Web Analytics. It is cookieless, does not identify you across sites, and is used to count page views. We do not sell analytics data. We do not run ad networks on this site.

Processors

• Cloudflare: hosting, Worker, KV, Web Analytics
• Brevo: transactional email for login links and API keys
• Stripe: Pro checkout, invoices, and cancellation
• Google Fonts: type on this site

Retention and deletion

Browser data stays on your device until you clear it. API data stays until you delete the account or we have to remove it for abuse or legal reasons.

Delete API data from your account, with DELETE /v1/me, or email nic@blacnova.net. That revokes keys and sessions, deletes stored designs, and cancels an open Pro subscription. Stripe may keep invoices as required by payment law.

Children

The API is not directed at children under 13. Do not sign up with a child’s email.

What we do not do

• We do not sell your photos or emails.
• We do not require an account to export a PNG from Instatools.
• We do not use a model to generate posts.

Updates

We may update this page. The date at the top is the latest version.

Questions: nic@blacnova.net or GitHub issues. This is not legal advice. Terms of service.