Last updated: October 2026
LibBot collects and stores, in encrypted form, the Instagram, LinkedIn and X (x.com) API access tokens needed to manage the social media accounts of library institutions. The account password of any platform is never stored.
Data collected when connecting X:
@library) — used only to show in the interface which account is connected. This information is read once from X's own account service during connection.The X account's follower list, messages, likes or data belonging to other users are not read and not stored.
An Instagram (Meta) account can be connected in one of two ways; during the transition period both may be used side by side. The data collected for each method is listed below.
Data collected when connecting with Instagram Login:
When connecting with Instagram Login, no Facebook Page information is collected.
Data collected when connecting with Facebook Login:
Personal information of followers, their messages, or data belonging to other accounts is not read and not stored. Instagram data is shown only to the institution that made the connection; it is not shared with other institutions, not sold and not used for advertising.
The collected tokens are used solely to publish content approved by the institution to the relevant social media platforms. The data is not shared with third parties.
X tokens are also used once a day to check whether the connection is still valid. If the connection has become invalid, the institution's administrator is informed by e-mail. This check publishes no content and reads no data.
The access token of accounts connected with Instagram Login is renewed automatically, before it expires, by a job that runs once a day. This job only extends the token's validity; it publishes no content and reads no data other than renewing the token.
Access tokens are stored in the database encrypted with AES-256, are never displayed on any screen or in the interface, and are transmitted over HTTPS. When tokens expire they are renewed automatically or the user is notified.
X refresh tokens are stored with the same AES-256 encryption. On X, every refresh issues a new refresh token and the old one becomes invalid; LibBot keeps only the most recent token.
Where the data is stored: Data is stored in a database in the European Union (the Netherlands) through our hosting provider Railway, and is processed on servers in the same region (European Union — the Netherlands). The provider is headquartered in the United States and its authorized personnel may access these systems remotely. Meta (Instagram) data is not transferred to any third party other than this provider.
Users can disconnect at any time. When a connection is removed, all data belonging to this account is permanently deleted from the database: the access token, the refresh token, the account username and the entire connection record. No trace remains and the connection can no longer be used.
This action cannot be undone; to use the account again it must be connected from scratch. If you want other data belonging to your institution (posts, sources) to be deleted, you can request it at the address below.
For questions about privacy: pr@libedge.com
See also Terms of Service and Data Deletion Instructions.
This is a translation of the original Turkish text. In case of any discrepancy, the Turkish version shall prevail.
LibEdge — LibBot Social Media Management Platform