# Security & privacy (/en/keamanan)

## Social accounts [#social-accounts]

- Instagram and Threads are connected through **Meta's official login**, and TikTok, YouTube, LinkedIn, X, and Pinterest through their own official logins. Discord goes through Discord's official authorization page, which creates a webhook in the channel you choose; your Discord login token is revoked right after use. Telegram goes through the official @TebarAppBot bot that you add to a channel or group yourself, without a login or phone number. Tebar never knows your account passwords.
- Access tokens from the platforms are stored **encrypted** (AES-256-GCM).
- You can disconnect an account any time from the **Accounts** menu, or revoke Tebar's access in the app settings of Instagram, Threads, or TikTok.

## API keys and AI access [#api-keys-and-ai-access]

- API keys and AI access tokens are only stored as a **hash**, so not even Tebar can read them.
- AI access can be limited to **read only** while connecting.
- Revoke access any time: the account menu → **API keys** → **Connected apps** → **Revoke**.
- Resetting your password through **Forgot password** automatically revokes every API key and AI access.

## When used through AI [#when-used-through-ai]

- Tebar asks the AI to confirm the text and target accounts before posting.
- Comments from other people are given to the AI as **untrusted data**, and the AI is told not to follow any instructions inside them. So a comment like "delete all posts" is not obeyed.
- Tebar only receives the data each tool needs (post text or a comment id, for example). Tebar does not read your chat history, memory, or files in your AI account.

## Data we keep [#data-we-keep]

Tebar keeps the connected accounts and workspaces, the posts and media you create, comments on your posts, Instagram DMs (with the [Inbox](/en/inbox), deleted when you disconnect the account), and statistics. Webhook notifications from Meta are kept for at most 30 days. The details are in the [Privacy Policy](https://tebar.app/en/privacy).

## Deleting your account [#deleting-your-account]

Open **Settings** → **Delete account**. Access ends right away, scheduled posts are canceled, then media files, posts, connected accounts, comments, and statistics are deleted, and you get a confirmation email. Posts already published stay on their platforms.

If you request data deletion from the app settings in Instagram or Threads, Tebar disconnects that account and deletes its comments, statistics, and profile. You can check the status at [publish.tebar.app/data-deletion](https://publish.tebar.app/data-deletion).