1. Overview
This Privacy Policy explains what information InstaBoost(“we,” “us”) collects, how we use it, and the choices you have. By using the Service you consent to the practices described here.
2. Information We Collect
Information you provide
- Account info — email address and basic profile fields received from Google when you sign in.
- Instagram handle — the public Instagram username you enter during onboarding and use when placing orders.
- Order details — the type of action, target URL or handle, quantity, and timestamps.
- Optional verification — screenshots you upload as proof that an action was completed. These are used only to encourage honest behaviour and are not stored unless explicitly required for a dispute.
Information collected automatically
- Device, browser, and OS information.
- IP address and approximate geographic region.
- Pages and features you use within the Service.
- Essential cookies and local storage entries required to keep you signed in.
3. How We Use Information
- To provide, secure, and maintain the Service.
- To process coin top-ups and detect fraudulent purchases or activity.
- To match your account to the engagement actions you perform or request.
- To communicate important service updates, security alerts, and (if you opt in) marketing messages.
- To comply with legal obligations.
4. Sharing
We do not sell your personal information. We share data only with the following categories of recipients:
- Authentication provider — Google, for sign-in.
- Database & hosting — Supabase (auth), Neon (Postgres database), and Vercel (application hosting).
- Payment processor — 2Checkout (Verifone) or its successors, for processing coin purchases. We do not store full card numbers.
- Legal recipients — courts, regulators, or law enforcement when required by law.
5. International Transfers
Your information may be processed in countries outside your country of residence, including the United States and the European Union. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
6. Data Retention
We retain personal information for as long as your account is active or as needed to fulfil the purposes described in this Policy. After deletion, residual records (e.g. transaction logs required for accounting and fraud prevention) may be retained for up to seven (7) years.
7. Your Rights
Depending on your jurisdiction, you may have the right to access, rectify, port, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these rights directly from the Settings page. For other requests, email privacy@instaboost.app.
8. Children
The Service is not directed at children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete it as soon as possible.
9. Security
We use industry-standard safeguards including HTTPS, encryption at rest, restricted access, and secure password practices. No method of electronic transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Changes
We will post material changes to this Policy on this page and update the “Last updated” date above. We encourage you to review it periodically.
11. Contact
Email us at privacy@instaboost.app.