Privacy Policy

Effective Date: May 6, 2026

This Privacy Policy applies to InstaPV and its website, https://www.instapv.ai (the "Site"). It explains how we collect, store, use, and share information through our anonymous Instagram viewer and related services (collectively, the "Services"), and what choices you have about that information.

1. What Personal Information We Collect

1.1 Information You Provide

The information we collect varies with how you use the Services and what you choose to share with us. We may collect:

• Inquiry information — content of messages you send through contact forms, email, or other channels, including any personal details you choose to include.
• Account information (registered users) — name, email address, account ID, authentication credentials handled by Firebase Authentication, profile picture URL, subscription status, and stored preferences.
• Payment information (Premium subscribers) — billing details processed by our payment processor Creem. We do not receive or store full payment-card numbers; the payment processor handles the card data directly.
• Service preferences — Instagram usernames you have searched while signed in, plan status, and UI preferences associated with your account.
• User-generated content — feedback, support requests, or survey responses you submit. Avoid sharing sensitive personal information; treat anything you send as potentially viewable by our team.
• Inferences — usage patterns and feature preferences derived from how you interact with the Services, used to improve them.

1.2 Information Collected Automatically

Like most web services, we and our third-party partners automatically collect technical information when you visit or interact with the Services. We use cookies, browser local storage, and standard logging technologies for analytics, authentication, and operational purposes. The categories include:

• Device data — browser type and version, operating system, device type, the URL you arrived on, the referring page, timestamps, time spent on the Services, and any errors encountered.
• Usage data — pages visited, features used, links clicked, search queries entered into our viewer, and other interactions with the Services.
• Approximate location — general geographic region inferred from your IP address. We do not collect precise GPS location.
• Authentication data — session tokens, sign-in status, and login timestamps for registered users.

1.3 Information From Third Parties

We may receive information from third parties and combine it with information we collect directly:

• Authentication services — if you sign in through Google (via Firebase Authentication), Google may share your name, email address, and basic profile information with us, subject to your Google privacy settings.
• Service providers — vendors operating on our behalf (payment, analytics, hosting) may share information with us as part of providing their services.
• Data providers — public Instagram data we surface in the viewer is sourced from public-web endpoints; we do not authenticate as you or anyone else against Instagram.

2. How We Use Personal Information

We use information for the following purposes:

• To provide the Services — running the anonymous Instagram viewer, your account, paid features, payment processing through Creem, and customer support.
• To personalize your experience — remembering UI preferences and tailoring the interface based on your account settings.
• To communicate with you — service notices, security alerts, account-related messages, and (where you have opted in) product updates.
• To monitor and improve the Services — analyzing aggregated usage, building new features, optimizing performance.
• To protect security and comply with the law — detecting and preventing fraud or abuse, enforcing our Terms of Service, and meeting legal obligations.
• For business transactions — in the event of a merger, acquisition, financing, sale of assets, insolvency, or bankruptcy.
• With your consent — for any additional purpose you separately authorize.

3. How We Share Personal Information

We share information only with the parties below and only for the purposes described:

• Service providers and processors — Vercel (hosting and CDN), Firebase Authentication / Firebase Analytics (Google) (sign-in and product analytics), Google Analytics 4 (anonymized usage analytics), Creem (subscription billing), and similar vendors that operate parts of the Services on our behalf.
• Legal and regulatory authorities — when required by law, subpoena, court order, or to protect the rights, property, or safety of InstaPV, our users, or the public.
• Business transaction parties — in connection with a corporate transaction such as a merger, acquisition, or sale of assets.
• With your consent — to any other third party when you direct or permit us to do so.
• Aggregated or de-identified data — we may share information that has been aggregated or stripped of identifiers and that cannot reasonably be used to identify you.

We do not sell your personal information, and we do not share your browsing activity with Instagram or with the owners of the public Instagram profiles you view.

4. Cookies and Tracking

We and our partners use cookies, pixels, and local storage to authenticate you, remember preferences, and measure usage. You can manage cookies in your browser settings — restricting or disabling them may affect sign-in, saved preferences, and parts of the Services.

5. Your Choices and Rights

Depending on your jurisdiction (including the EU/UK GDPR and California CCPA), you may have the following rights with respect to your personal information:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or out-of-date data.
• Delete personal data we no longer need (the "right to be forgotten").
• Withdraw consent where processing is based on consent.
• Object to or restrict certain uses of your information.
• Opt out of marketing communications via the unsubscribe link in any such email.
• Account deletion — registered users can request deletion of their account at any time. We may retain limited records as required by law or for legitimate business purposes.

To exercise these rights, contact us at deloris@deloris-ai.com. We may ask for information to confirm your identity and we will respond within the timeframes required by applicable law.

6. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including TLS encryption for data in transit. No system is perfectly secure, however, and you assume some risk when transmitting information over the internet.

7. Data Retention

Account information is retained while your account is active. Subscription and tax records are retained for the period required by applicable law. Server logs are retained for up to 30 days. Analytics data is retained according to our Google Analytics 4 retention configuration. When data is no longer required, it is deleted or anonymized.

8. Links to Third-Party Sites

The Services may link to third-party websites and tools that we do not control. We are not responsible for their privacy practices. Review their policies before sharing any information with them.

9. Children's Privacy

The Services are not directed to children under 16 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from anyone under that age. If you believe we have collected information from a child, please contact us at deloris@deloris-ai.com and we will take steps to delete it.

10. International Data Transfers

InstaPV operates globally. Your information may be processed in countries other than your country of residence, including the United States, where our service providers operate. Where required, we rely on standard contractual clauses or equivalent safeguards.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will post the updated version on this page and refresh the "Effective Date" above. Material changes may be highlighted with additional notice on the Site.

12. Contact

For privacy questions, requests, or complaints, contact us at deloris@deloris-ai.com. We aim to respond within 30 days.

Disclaimer: InstaPV is not affiliated with, endorsed by, or officially connected to Instagram, Meta Platforms Inc., or any of their subsidiaries. The official Instagram website is instagram.com. We access only publicly available Instagram content and we do not store Instagram credentials.