How Chirio works

Chirio is a social media publishing service. People and businesses connect the social accounts they own — Instagram, Threads, X and LinkedIn — and Chirio publishes posts to those accounts on their behalf.

The point of it is simple: instead of opening every app and posting the same announcement over and over, you write the post once, choose which of your connected accounts should receive it, and Chirio delivers it to each one through that platform's official API.

What Chirio does

• Publishes posts you author. Text, images and video, sent to the accounts you select. Each platform gets its own version of the caption if you want one, since a post that fits LinkedIn rarely fits Threads.
• Posts a first comment. Optionally, right after a post goes live, Chirio can add a comment from the same account — the common "link in the comments" pattern, which keeps the caption clean.
• Reports what happened. Every post records a per-account result: published, with a link to the live post, or failed with the reason the platform gave.
• Shows what you published. A per-account publishing history with links to the live posts; developers can also fetch basic engagement metrics for a post through the API.

What Chirio does not do

• It does not read your feed, your direct messages, your followers, or anyone else's content.
• It does not post anything you have not created and approved. There is no auto-generated or auto-published content.
• It does not sell data, use it for advertising, or share it with anyone beyond the platform you are publishing to.

Connecting a social account

Connecting is always started by you, and always completed on the platform's own website. Chirio never asks for, sees, or stores your social media password.

1. You choose a platform in the Chirio dashboard — Instagram, Threads, X or LinkedIn — and select "Connect".
2. Chirio sends you to the platform's official login page. Instagram and Threads use Meta's own authorization screens. We generate a single-use, ten-minute state token first, so the response can be matched back to the request you started and nothing else.
3. You sign in and review the permissions on the platform's page. This is where you see exactly what access is being requested, and it is the point at which you can decline. Chirio requests only what publishing requires: the ability to identify your account, publish content, and post a comment on the posts it publishes.
4. The platform sends you back to Chirio with a short-lived authorization code. Chirio exchanges that code for an access token — upgrading it to a long-lived token where the platform offers one — and encrypts the token before storing it.
5. The account appears in your dashboard and can be selected as a publishing target. If you authorize a LinkedIn company page you administer, that page is listed as its own target alongside your personal profile.

At no point does Chirio receive your credentials. The only thing we hold is the access token the platform issues, which is encrypted at rest with AES-256-GCM using a key held outside the database.

Disconnecting

You stay in control of the connection, and there are two ways to end it:

• In Chirio, choose "Disconnect" on the account. Its stored tokens are deleted immediately.
• On the platform, remove Chirio from your Instagram or Threads app settings. The platform notifies us and we delete the connected account and its tokens automatically — you do not need to contact us or take any action in Chirio.

Deleting all of your data is covered on the data deletion page.

Questions

Email support@dopler.app.