← Back to OyePost

Privacy Policy

OyePost is a product of XMISS — a proprietorship of Priyam Gangrade, Mumbai, India — which also operates The Upcycle Story (theupcyclestory.in). OyePost is the parent brand of Oye Orders (restaurants), Oye Gym (gyms) and OyeSociety (housing societies).

OyePost ("we", "us") helps small businesses turn their work photos into branded Instagram posts via WhatsApp. For gyms and studios, through Oye Gym, we also run member engagement — reminders, workouts, and an in-gym display screen. Through Oye Orders we also provide restaurants with a WhatsApp-based ordering system. This policy explains what we collect and how we use it.

If you ordered food from a restaurant that uses Oye Orders: see section 1a below. In short — we hold your WhatsApp number, delivery address and order history so the restaurant can deliver your order and so you can reorder easily. Reply STOP on WhatsApp at any time to stop optional messages, or message us to have your details deleted.

If you are a member of a gym that uses Oye Gym: your gym decides what member information to share with us and why. We handle it on your gym’s instructions. To be removed, or to see what is held about you, ask your gym — or contact us directly using the details at the end of this page.

1. Information we collect

• Photos & videos you send to our WhatsApp number, to create your posts.
• Business details you provide — name, Instagram handle, logo, brand colours, contact number.
• Instagram account info needed to publish on your behalf (account ID and an access token you authorise).
• Post performance data (reach, saves, shares) read from Instagram to improve your results.
• Payment information is handled entirely by our payment processor (Razorpay). We never see or store your card details.

For gym and studio clients, we also process, on the gym’s behalf:

• Member records the gym gives us — name, contact number, membership dates and fee, and optionally date of birth (used only to send a birthday wish).
• Attendance, either imported by the gym from its own device or recorded when a member checks in on WhatsApp — used for streaks and to warn the gym when a member stops coming.
• Member-submitted photos and videos, published only after the member consents and the gym approves. Consent for Instagram and for the in-gym screen is asked separately, and either can be declined.
• A one-time fitness safety flag. Before sending workout content we ask the member one health-screening question. We store only whether a ready-made plan is suitable or the member should see a trainer — the answer itself and any medical detail are not retained.

1a. Oye Orders — restaurants and their customers

When a restaurant uses Oye Orders, we process on that restaurant's behalf:

• The restaurant's details — name, address, area, opening hours, menu items, prices and photos, delivery charges, coupons, and the WhatsApp numbers of the owner, staff and delivery partners.
• Customer details — the WhatsApp number the order came from, the name and delivery addresses the customer chooses to save, cooking instructions they add, order history, and any rating they give.
• Payment status only. Payments are processed by Razorpay directly to the restaurant. We store whether an order is paid and the payment reference so refunds can be issued — we never see or store card, UPI or bank details.

We use this to place and track orders, send order updates on WhatsApp, save addresses so reordering is quick, issue automatic refunds when an order is rejected or times out, and give the restaurant its own sales reports.

Marketing messages are opt-in only. We do not send customers promotional messages unless they ask for them by replying DEALS, and one word — STOP — ends them. Order-related updates for an order you placed are not marketing.

Who sees what: a restaurant sees only its own orders and customers. We never show one restaurant another restaurant's data, and we do not sell customer data to anyone. Where we publish network-level statistics they are aggregated and anonymised, and identify no customer and no restaurant.

2. How we use it

• To create, brand and publish your social media posts.
• To learn what content performs best for you and improve future posts.
• To provide support and manage your subscription.
• For gyms: to send reminders, workouts and updates their members have not opted out of, and to show the gym which members may be drifting away.
• To produce aggregated, anonymised industry benchmarks — for example the typical share of members who visit weekly across all gyms on Oye Gym. These aggregates never identify a business, a member, or any individual record, and are only shown once enough businesses are included for a comparison to be meaningful.

3. What we do NOT do

• We do not sell or rent your data or photos to anyone.
• We do not use your photos for any purpose other than creating your posts.
• We do not post anything without your approval (on paid plans, you approve each post or schedule).
• We do not show one business any other business’s data. Comparisons are aggregate figures only.
• We do not store members’ medical answers, and we do not ask for medical records.
• We do not keep sending messages to a member who has opted out — a member can reply STOP on WhatsApp to choose what they receive.

4. Third-party services

We use trusted providers to run the service, and share data with them only as needed to provide it:

• Meta (WhatsApp Business, Instagram, Facebook) — messaging and publishing.
• Google Firebase — the database where account and member records are stored (Singapore region).
• Netlify — hosting of our website and the software that runs the service.
• Cloudinary — hosting of photos and videos.
• OpenAI — caption and plan drafting. Drafts are reviewed before anything is sent or published.
• Razorpay — payments.

5. Data retention & deletion

We keep your posts and brand details while your account is active. You can ask us to delete your data at any time by messaging us — we’ll remove it within a reasonable period.

For gym clients: when an account closes we provide an export of the gym’s data on request within 30 days, and delete it within 90 days after that, unless the law requires us to keep it. Aggregated, anonymised benchmark figures that no longer identify anyone are not affected.

6. Contact

Deleting your data: see oyepost.com/data-deletion — what gets deleted, how to ask, and how long it takes.

Questions or data requests: WhatsApp +91 96993 73048 or email rajat2387@gmail.com.