Privacy Policy

1. Who We Are

Reachproof.ai (“we”, “our”, “us”) is an influencer campaign monitoring tool operated by Reachproof. Our application is available at reachproof.ai.

2. What Data We Collect

When you connect your Instagram Business or Creator account via Instagram Business Login, we access and store:

• Profile information: Instagram user ID, username, account type, profile picture URL, follower count, and media count.
• Media data: Post captions, media URLs, thumbnail URLs, timestamps, like counts, and comment counts.
• Insights data: Post-level metrics (impressions, reach, saves, engagement, video views) and account-level insights (follower count over time, impressions, reach, profile views).
• Authentication tokens: Instagram API access tokens required to fetch your data. Tokens are stored securely and encrypted at rest.

We do not collect passwords, private messages, payment information, or any data from personal (non-Business) Instagram accounts.

3. How We Use Your Data

• Display your Instagram analytics on your Reachproof.ai dashboard.
• Track campaign compliance — check whether assigned influencers posted with required hashtags during campaign windows.
• Compute aggregated statistics such as hashtag performance, engagement rates, and reach metrics.

We do not sell, share, or transfer your data to third parties for marketing or advertising purposes.

4. Data Storage & Security

Your data is stored in a secure PostgreSQL database hosted by Neon (neon.tech) and cached in Upstash Redis. Both services use encryption at rest and in transit (TLS). Access tokens are stored in Redis with encryption and are refreshed automatically.

Our application is hosted on Vercel with HTTPS enforced on all connections.

5. Data Retention

We retain your data for as long as your Instagram account is connected to Reachproof.ai. If you disconnect your account or request deletion, we will remove all associated data within 30 days.

6. Your Rights

You have the right to:

• Access: View all data we hold about your Instagram account via your dashboard.
• Deletion: Request complete deletion of your data. See our Data Deletion page for instructions.
• Revoke access: Disconnect your Instagram account at any time through Instagram Settings > Apps and Websites.

7. Third-Party Services

We use the following third-party services:

• Instagram Graph API (Meta Platforms) — to fetch your Instagram Business data.
• Vercel — application hosting.
• Neon — PostgreSQL database hosting.
• Upstash — Redis caching and token storage.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.

9. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at: privacy@reachproof.ai