Privacy Policy

1. Introduction

FollowGap ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address used for authentication via magic link
• Instagram Credentials: Session tokens and authentication headers you provide to use the Service (these are processed but not permanently stored on our servers)

2.2 Information Automatically Collected

• Usage Data: Information about how you interact with our Service
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP addresses, access times, and pages viewed

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Authenticate your identity and manage your account
• Process your Instagram data to identify non-mutual followers
• Send you service-related communications (e.g., magic link emails)
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues or security threats

4. Instagram Data Handling

When you use our Service to analyze your Instagram account:

• Your Instagram authentication credentials are transmitted securely and used only to make API requests on your behalf
• We temporarily cache follower/following data to improve performance (cached data expires within 24 hours)
• We do not permanently store your Instagram follower or following lists on our servers
• We do not access your Instagram direct messages, stories, or private content
• We do not share your Instagram data with third parties
• You can clear your cached data at any time by updating your configuration

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information:

• All data is transmitted using SSL/TLS encryption
• Authentication tokens are securely hashed and stored
• We use industry-standard cloud infrastructure with appropriate security controls
• Access to personal data is restricted to authorized personnel only
• We regularly review and update our security practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained until you delete your account
• Instagram Cache Data: Automatically expires after 24 hours
• Session Data: Cleared upon logout or after the session expires
• Log Data: Retained for up to 90 days for security and troubleshooting purposes

7. Third-Party Services

Our Service may use the following third-party services:

• Authentication Providers: For secure email-based login
• Cloud Hosting: For infrastructure and data storage
• Analytics: To understand usage patterns (anonymized data only)

These third parties have their own privacy policies and may collect information as specified in their respective policies. We encourage you to review the privacy policies of any third-party services you interact with.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing of your personal data
• Withdrawal: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us through the account settings page or our support channels.

9. Children's Privacy

Our Service is not intended for individuals under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your personal data remains protected in accordance with this Privacy Policy.

11. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. These cookies are strictly necessary for the Service to function and cannot be disabled. We do not use third-party tracking cookies or advertising cookies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through our support channels or the contact information provided in the application.