Privacy Policy
Last updated: August 14, 2026
Our Privacy & Compliance Commitments
1. Overview & Data Controller
This Privacy Policy governs the manner in which IG Media Intelligence(“we”, “our”, or “the Platform”) collects, uses, maintains, and discloses information collected from users of the website and SaaS application.
We operate as an independent social media analytics and sentiment data export provider. We are committed to processing data responsibly, lawfully, and transparently in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and international privacy frameworks.
2. Information We Collect
We collect information in two categories:
When you create an account, we collect your email address and authentication credentials (managed securely via Supabase Auth). If you purchase tokens or subscriptions, payment transactions are processed securely by our PCI-DSS compliant Merchant of Record (Lemon Squeezy). We never store credit card numbers on our servers.
When you request a comment export, you submit a public Instagram post URL. Our system retrieves publicly available comment text, public author handles, timestamps, and like metrics for analytics and CSV, Excel, or JSON export. We do NOT access private accounts, direct messages (DMs), or private user profiles.
3. How We Use Collected Data
We use the information collected solely for the following legitimate purposes:
- To provide and deliver public comment analytics, sentiment filtering, and data export features.
- To manage your token balance, usage audit logs, and account authentication.
- To detect, prevent, and mitigate security threats, API abuse, and fraudulent activity.
- To comply with statutory legal obligations and payment processor requirements.
4. Third-Party Service Providers
We do not sell, rent, or trade personal data to third parties. We share information only with trusted infrastructure providers that act as data processors under our strict instructions to operate the platform:
Supabase (Database & Authentication)
We use Supabase as our backend infrastructure provider for secure user authentication, database storage, and PostgreSQL backups. Supabase processes your email address, authentication tokens, profile details, and search query records on our behalf. Data is stored on secure cloud servers protected by encryption in transit (SSL/TLS) and at rest. Supabase acts as a data processor bound by a formal Data Processing Agreement (DPA). For more information, review Supabase's Privacy Policy.
Lemon Squeezy (Payment Processor & Merchant of Record)
We use Lemon Squeezy as our authorized Merchant of Record and payment infrastructure provider. When you purchase token refills or subscription plans, all payment processing is handled directly by Lemon Squeezy. This ensures:
- Your full billing details (card number, CVC, billing address) are collected and processed securely by Lemon Squeezy. IG Media Intelligence never stores your credit card number on our servers.
- Lemon Squeezy acts as the legal Merchant of Record responsible for international payment compliance, sales tax/VAT collection and remittance, and fraud prevention.
- IG Media Intelligence receives only confirmation of payment and token pack allocations.
For full details on how Lemon Squeezy handles payment data, review Lemon Squeezy's Privacy Policy.
Google Sign-In / Google OAuth
If you choose to sign in with Google, we receive only your public profile name, verified email address, and avatar URL from Google to create your account. We never receive or store your Google password. For more information, review Google's Privacy Policy.
Google Gemini API (AI & Natural Language Processing)
Used exclusively for on-demand comment sentiment classification, topic clustering, and discussion summarization. Under Google's commercial API Data Protection and Governance terms, customer queries and extracted comments are processed securely in real-time and are never used to train or fine-tune Google's foundation models.
Upstream Social Media Feeds (RapidAPI / Apify)
We utilize reliable enterprise API gateways to retrieve publicly accessible Instagram post metadata and commentary. Extractions only process public posts and never access private accounts, stories, or direct messages.
All third-party service providers are contractually required to maintain strict data security and confidentiality standards and are prohibited from using your data for their own independent marketing purposes.
5. Your Rights (GDPR & CCPA)
Depending on your jurisdiction, you have the right to:
- Access & Portability: Request an export of your account and saved search history in structured JSON format.
- Rectification & Erasure: Request the deletion of your account and all associated scraped post history from our database.
- Revocation of Consent: Close your account at any time with immediate cessation of data processing.
To exercise any of these rights, submit a request via our Contact & Privacy Support Form.
6. Cookies & Tracking
We use strictly necessary session cookies for user authentication and security tokens. We do not use intrusive third-party cross-site advertising trackers. For full details, please review our Cookie Policy.
7. Disclaimer Regarding Meta & Instagram
Independent Service Notice: IG Media Intelligence is an independent software tool and is not affiliated, associated, authorized, endorsed by, or in any way officially connected with Instagram, Meta Platforms, Inc., or any of their subsidiaries. All product and company names are trademarks™ or registered® trademarks of their respective holders.