Privacy Policy

DineContent ("we", "us") operates https://dinecontent.com, an AI marketing service that helps restaurants create social-media captions, hashtags, content plans and marketing images, and — for Premium subscribers — publish scheduled posts to their own Instagram professional account.

For any privacy question or request, contact us at dinecontent1@gmail.com.

• Account data — Email address, name, restaurant name, password (stored only as a bcrypt hash), a 6-digit email verification code, subscription plan, and account creation date.
• Brand & menu memory — Details you enter about your restaurant: type, location, target audience, tone, preferred language/dialect, signature dishes and menu items (name, category, price, description).
• Content you submit — Food photos and text descriptions you upload for AI analysis, competitor names or details you ask us to analyse, images you upload for Instagram publishing, and messages you send to the in-app AI assistant or support chat.
• Generated content — Captions, hashtags, content plans, marketing images, reports and other output created for you, plus items you save as favorites or templates.
• Usage data — A daily counter of AI generations (used to enforce plan limits), your streak/achievement metrics, and timestamps of activity.
• Payment data — Your plan, payment provider (Stripe or PayPal), checkout session or subscription ID, amount, currency and payment status. We never receive or store full card numbers — these are handled by Stripe or PayPal.
• Instagram connection data (Premium, optional) — When you connect Instagram we store your Instagram user ID, username, account type, the permissions you granted, an access token issued by Meta, and its expiry date. The token is stored encrypted.
• Technical data — Server logs containing IP address, request path and errors needed to operate and secure the service. We do not use third-party analytics, advertising pixels or tracking cookies on the site.

• Provide the service — Your photos, descriptions, brand/menu memory and requests are sent to AI models to generate your content. Generated content is saved to your library so you can reuse it.
• Instagram publishing — If you connect Instagram, we use your access token only to create and publish the posts you schedule, to the account you connected. We never post without a schedule or publish-now action from you, and we never use one customer's token for another customer.
• Account & security — To verify your email, sign you in, enforce plan limits and protect against abuse.
• Payments — To activate your plan after a successful payment, show your billing history and process cancellations.
• Support — To answer your questions through the AI support widget or by email.
• Service emails — Verification codes and account-related messages sent from noreply@dinecontent.com. We do not send marketing newsletters.

We do not sell your data. We share it only with the providers needed to run DineContent:

• AI model providers (OpenAI and Google Gemini, accessed through Emergent's integration layer) — receive the photos, text and brand context you submit in order to generate content and images.
• Meta Platforms (Instagram Graph API) — receives the caption and a temporary public image link for each post you publish, using the token you authorised.
• Stripe and PayPal — process payments and subscriptions.
• Resend — delivers verification and account emails.
• Emergent (hosting) and MongoDB — host the application and database.

We may also disclose information if required by law or to protect the rights and safety of DineContent and its users.

Connecting Instagram is optional and available to Premium subscribers. Authorisation happens on Meta's own login screen; we never see your Instagram password. Meta issues us a long-lived access token (about 60 days) which we store encrypted and refresh automatically while you keep the connection active.

To publish, Meta must download your image from a public link. We serve that image from a signed, hard-to-guess URL created only for that post.

Disconnect at any time from Schedule → Instagram publishing → Disconnect. This deletes your access token immediately and cancels any pending Instagram posts. You can also remove DineContent from Instagram Settings → Apps and websites; Meta then notifies us and we delete the connection automatically.

If you request data deletion through Meta, we delete your Instagram connection and give you a confirmation code you can check on this page.

Data is stored in a MongoDB database on infrastructure provided by Emergent. Traffic to the site uses HTTPS. Passwords are hashed with bcrypt; Instagram access tokens are encrypted at rest; payment webhooks and Meta callbacks are signature-verified; API access requires a signed session token that expires.

Your account data, brand/menu memory, generated content, saved images and scheduled posts are kept for as long as your account exists. Payment records are retained for accounting and fraud-prevention purposes even after account deletion, but are detached from your name and email.

No system is perfectly secure. If we become aware of a breach affecting your data we will notify you at your account email.

• Access & correction — View and edit your brand and menu memory, library, favorites and templates inside the app at any time.
• Delete your account — Go to Billing → Delete account, confirm your password, and your account, content, images, scheduled posts and Instagram connection are permanently deleted immediately.
• Disconnect Instagram — Schedule → Instagram publishing → Disconnect, or revoke from Instagram's own settings.
• Cancel your subscription — Billing → Cancel; your plan remains active until the end of the paid period.
• Other requests — Email dinecontent1@gmail.com for a copy of your data or any other privacy request. We respond within 30 days.

We do not use tracking or advertising cookies. The app keeps your sign-in token and your language preference in your browser's local storage so you stay logged in and see the site in your chosen language. Clearing your browser storage signs you out.

DineContent is a business tool and is not directed to anyone under 18. We do not knowingly collect data from children.

Our providers (listed in section 4) may process data in the United States and other countries. By using DineContent you consent to this processing.

We will post any changes on this page and update the date at the top. Material changes will also be announced inside the app.

Privacy requests: dinecontent1@gmail.com

DineContent — https://dinecontent.com