1. Who this policy covers
This policy applies to visitors and account holders using instaspy.tech and the InstaSPY Reel research service. “InstaSPY”, “we”, “us” and “our” refer to the InstaSPY service and its operator.
2. Information we handle
- Account information: email address, display name, authentication provider identifier and optional profile image.
- Research inputs: public Instagram Reel URLs that you submit and the resulting public metadata, transcript, media evidence and analysis.
- Product preferences: optional onboarding answers and settings used to tailor the experience.
- Support information: messages and details you send when contacting us.
- Technical and security data: IP address, browser and device details, timestamps, session information, security-challenge results and server logs needed to operate and protect the service.
- Billing records: plan, amount, payment status and payment identifiers when paid plans become available. Razorpay processes payment credentials; InstaSPY does not store complete card, bank-account, UPI PIN or OTP details.
3. How we use information
We use information to create and secure accounts, process requested Reel analyses, show private research history, provide exports, enforce product limits, answer support requests, detect abuse, improve reliability and comply with legal or payment obligations.
We do not sell personal information. We do not claim access to private Instagram insights such as private saves, shares, retention curves or conversions.
4. Service providers
Information is shared only as needed with service providers that help run InstaSPY, including Supabase for authentication and private account data, Cloudflare for security and selected AI processing, Resend for account email, hosting infrastructure for application storage, and Razorpay for payments when billing is enabled. Public Reel information is obtained from Instagram or related public delivery systems.
These providers process information under their own terms and privacy practices. Information may be processed outside your state or country where their infrastructure operates.
5. Storage and retention
InstaSPY currently keeps downloaded media, audio, frames, contact sheets and cover images for up to 7 days. Job records, public metadata, transcripts and analysis results may be retained for up to 365 days so account holders can reopen their research. Active jobs are not removed mid-processing.
Security logs, support records, payment records and backups may be kept for longer where reasonably necessary for fraud prevention, accounting, dispute handling, backup integrity or law. We remove or anonymise information when it is no longer required.
6. Cookies and local storage
We use essential browser storage and session technologies for login, preferences, security and local history import. We do not currently use third-party behavioural advertising cookies. If that changes, this policy and any required consent controls will be updated.
7. Your choices
You may update available profile information inside your account. You may request access, correction or deletion of personal information by emailing us from your account address. We may need to verify your identity, and some information may be retained where required for security, payments, disputes or law.
8. Security and children
We use access controls, encrypted connections, private per-user history rules and protected server storage. No online system is completely risk-free, so please use a strong unique password and never send payment PINs, passwords or OTPs to us.
InstaSPY is intended for people aged 18 or older and is not knowingly directed to children.