Understanding Connection Permissions
When you connect a social media account to Curator, the platform requests read-only access to pull your public content into feeds. Curator never posts on your behalf or modifies your accounts.
What Curator Can Access
Curator requests permissions to read public posts, photos, videos, and metadata from your connected accounts. This allows the platform to:
Pull content matching your feed criteria (hashtags, mentions, pages)
Display user names, profile pictures, and engagement metrics
Set up webhooks to detect new content automatically
Access analytics for posts shown in your feeds
All permissions are read-only. Curator cannot post, delete, or edit content on your social accounts.
Facebook and Instagram Permissions
Since Instagram is owned by Meta, any connection to an Instagram Business account must go through a Facebook account that is an administrator of the linked Facebook Page. The same applies when connecting a Facebook Page. This means, you'll authorize Curator using your personal Facebook account.
When connecting Facebook Pages or Instagram Business accounts, you'll see these permissions during OAuth:
pages_manage_metadata – Access basic information about your Facebook Page (like name, and settings) to properly connect
pages_read_engagement – Read posts, photos, and videos from your Page
pages_read_user_content – Read user-generated content like comments
instagram_basic – Access basic Instagram Business Account metadata
instagram_manage_comments – Read comments and access posts
instagram_manage_insights – To view your Instagram account’s performance data (like reach and such)
business_management – Use Business Manager API for connectivity
Despite names like "manage," these permissions only allow Curator to read data—not change or publish anything.
Other Networks
Similar read-only permissions apply when connecting:
TikTok (public videos and user data)
Twitter/X (tweets, profiles, media)
Reddit (posts and profiles)
Slack (workspace info and slack channels)
Threads (public threads and profile)
Each platform shows its own authorization screen listing what Curator can access. You can revoke these permissions anytime through the platform's settings or your Curator dashboard.
Revoking an access removes Curator's access to pull new content from the Source(s) using that account as it's connection.
Privacy and Security
Curator only accesses content that's already public on your social accounts. Private posts, direct messages, and password information are never accessible. All connections use secure OAuth authentication—Curator never stores your social media passwords.