The checkpoint between your team and your audience. Staff upload and submit, you approve, and it publishes through Instagram directly — so your login never leaves your hands.
No charge during the trial · Disconnect any time in one click
Thirty seconds from pass to plate. Book the window seat before the weekend goes.
From Amara O. · Creator · 12 min ago
Amara can upload and submit. She cannot publish, and she never sees the account password.
How it works
Full-quality video straight from their phone, never through a chat app. Nothing arrives blurry, and nobody asks you for the login.
Everything stops and waits for you, with the video, the caption and the automatic checks in one place. Approve it, or send it back with a note.
Published through Instagram directly, at the time you chose — with protection against the same post going out twice if the connection stutters.
Connecting your account
Handing an account to software is a real decision, so here is the whole of it — including how to undo it.
We send you to Instagram’s own screen — the same one you would see connecting any app. You sign in there, not here.
We never see your password or your login screen.
What comes back is a limited key that only permits publishing and reading your own stats. It cannot change your password, your email, or your followers.
Encrypted before it is stored. Unusable if copied.
Remove the connection here, or revoke it from Instagram’s own settings under apps and websites. It stops working immediately, either way.
No email required. No waiting on support.
Security
A password in a group chat. A staff phone that leaves with them. A login from a device Instagram does not recognise. Every one of those is closed here — not by a rule somebody has to follow, but because the system gives nobody the means.
There is no password for anyone to leak, because we never receive one. You approve access on Instagram’s own screen, and what comes back is a limited key you can cancel whenever you like.
OAuth 2.0 · no credential stored
That key is sealed with the same class of encryption banks use, before it ever reaches a database. Someone who stole the entire database would hold nothing usable.
AES-256-GCM
Who uploaded, who changed the caption, who approved, when it went live. Each entry is locked to the one before it, so a deleted or edited line shows up as a break rather than disappearing.
SHA-256 hash chain
Remove someone and they are locked out on their very next click. No password to change, no wondering who else knew it, no waiting for a session to expire.
Enforced server-side, per request
Who can do what
Five roles, checked on the server every single time. This table is generated from the exact permission set the application enforces, so it cannot claim something the software does not do.
| Capability | Owner | Admin | Manager | Creator | Analyst |
|---|---|---|---|---|---|
| Upload & draft | allowed | allowed | allowed | allowed | not allowed |
| Submit for review | allowed | allowed | allowed | allowed | not allowed |
| Approve | allowed | allowed | allowed | not allowed | not allowed |
| Publish live | allowed | allowed | allowed | not allowed | not allowed |
| Connect accounts | allowed | allowed | not allowed | not allowed | not allowed |
| Manage team | allowed | allowed | not allowed | not allowed | not allowed |
| Billing | allowed | not allowed | not allowed | not allowed | not allowed |
Knowing who delivers
Reach and engagement come back attached to the person who submitted the work. You pay and promote on what actually performed, not on who spoke loudest in the group.
Pricing
7 days free, with your real team and your real account. Cancel before it ends and nothing is charged.
One account, one team
High-value accounts posting daily
Agencies and multi-brand groups
Billed monthly. Cancel any month — there is no annual lock-in.
Questions
No — and neither can we, because we never receive one. You authorise once on Instagram’s own screen and it hands us a limited key instead. Your team publishes through the platform. When someone leaves, you remove their seat and their access ends on their next click. There is no password to change afterwards.
A Professional account — Business or Creator. Switching is free and takes about a minute in the Instagram app under Settings → Account type. Personal accounts cannot publish through the official API, so this is required with any tool of this kind, not just ours.
Yes, in one click from your settings — or from Instagram itself under Settings → Apps and websites. The key stops working immediately. Nothing already published is affected, and we stop having any access at all.
Yes. Publishing goes through Meta’s official Content Publishing API, the same interface large brands and agencies use. It is safer than several people signing into one account from different devices, which is a common trigger for security lockouts.
Only if you decide they can. Creators upload and submit but cannot publish — that is enforced by the permission system on every request, not by policy. You can also require that nobody approves their own work, so every post is seen by a second person before it goes live.
Your card is charged for the plan you chose and the account continues. Cancel before the 7 days are up and nothing is charged at all. There is no annual commitment — you can cancel in any month.
In London, on Google Cloud infrastructure. Media sits in storage isolated per workspace and is only ever served through short-lived signed links, never a public URL.
Yes. The Agency plan connects up to ten accounts under one login, each with its own team and its own approval chain, so a contributor on one brand has no visibility into another.
Connect an account, invite your team, and put the first post through the gate today.
Start 7-day trialDisconnect any time — from here or from Instagram itself.