Legal
Privacy Policy
Effective 2026-05-27
At a glance
We collect the minimum we need to run igtrackr: your Google account email for sign-in, payment info via Stripe (we never see your card), the Instagram handles and hashtags you query, and standard server logs from Vercel. We do not sell data, do not share with brokers, and do not run an ad network.
Data we collect
- Account email (Google OAuth via Supabase)
- Used to sign you in and send billing receipts. Stored in our database alongside your plan tier. You can delete your account from settings (see "Your rights" below).
- Stripe customer ID and subscription state
- Stripe handles your card. We store the customer ID, the price you're on, and the subscription status so we can enforce plan limits. We never receive card numbers or CVCs.
- Instagram handles and hashtags you query
- Logged so you can revisit past lookups from your dashboard. Cached briefly via Upstash KV to keep the Profile Analyzer fast. Public data only — we don't store data from accounts you don't own.
- Server logs (IP, user agent, request URL)
- Standard Vercel platform logs, retained ~30 days. Used to debug errors and detect abuse. Not joined to your account profile beyond what's needed for rate limiting.
Third parties
We use a small set of infrastructure providers:
- Supabase — auth + Postgres database hosting
- Vercel — application hosting + serverless compute + edge logs
- Stripe — payment processing (cards never touch our servers)
- Upstash — KV cache for query results
- Instagram data provider — public Instagram data source
- Google — OAuth identity provider for sign-in
Each operates under its own DPA. We send the minimum data each provider needs to do its job.
Your rights
You can:
- Delete your account — settings page or email hi@igtrackr.com. Deletion removes your profile, tracked accounts, and query history within 30 days.
- Export your data — same channels. You'll receive a JSON dump of everything we hold under your email.
- Object to processing — email us. We'll respond within 30 days.
Changes to this policy
If we materially change what data we collect or how we use it, we'll email registered users at least 30 days before the change takes effect. The effective date at the top of this page always reflects the current version. Use of Pro and Agency tiers is also governed by our Terms of Service.
Contact
Questions: hi@igtrackr.com.