Little Canaan · Cristofaro Studios

Privacy Policy

Last updated: September 9, 2026

In one sentence: Little Canaan uses a scheduling tool (a private instance of Postiz) to publish our own children's educational content to the social media accounts that we own and connect ourselves. We do not collect data from visitors or third parties for marketing purposes.

1. Who we are

Little Canaan is a Christian children's content channel operated by Cristofaro Studios ("we", "our"). This policy describes how our internal social media management tool handles data when connecting to the Meta platforms (Facebook and Instagram) and others.

2. What the tool does

We run a private, self-hosted instance of the open-source software Postiz on our own server. Its only purpose is to schedule and publish our own posts (videos, images, captions) to the social media accounts we operate. The tool is used only by our team — it is not a service open to the public, and no third parties create accounts on it.

3. Data we process

Access tokens (OAuth): when we connect a Facebook/Instagram account, the platform issues a token that we store securely on our server, used only to publish on behalf of that account.
Connected-account metadata: username, account/Page ID, and profile picture — shown in the interface only so we can identify which account is connected.
Content we create: the text, images, and videos of the posts we prepare, plus the scheduled date and time.

We do not collect follower data, we do not read private messages, and we do not access personal information of other platform users.

4. How we use Meta data

The permissions granted by Meta (for example instagram_content_publish, pages_show_list) are used for a single purpose: to publish and schedule our own posts to our Facebook Pages and Instagram Business accounts. We do not use this data for advertising, profiling, or any purpose beyond publishing our own content.

5. Sharing

We do not sell, rent, or share data with third parties. Data stays on our server and travels only between our instance and the platforms' official APIs (Meta, YouTube, Pinterest, and similar) in order to carry out publishing.

6. Retention and security

Tokens and metadata are kept only while an account remains connected and the tool is in use. The server uses encrypted connections (HTTPS) and access is restricted to our team. When an account is disconnected, its corresponding tokens are removed.

7. Data deletion

Because the only connected accounts are our own, deletion is performed by us at any time by disconnecting the account in the tool, which erases the stored tokens and metadata. To request removal of any data related to this integration, contact us at the email below and we will respond within 30 days.

8. Changes

We may update this policy; the date at the top indicates the current version.

9. Contact

Privacy questions: contato@cristofarostudios.com