Privacy

Creators. Your account identity from your sign-in method, the username you choose, the profile content you enter or select, the advertising options you create, and connection health for the Instagram professional account you link. We never show your Instagram access token to anyone, including you, and it is stored encrypted.

Advertisers. The name, preferred contact method and contact value you submit, plus optional brand, Instagram username, budget, preferred date and message. This is shared only with the creator you addressed.

When a creator connects an Instagram professional account, we request the minimum permissions needed to show a name, picture, username and the statistics the creator chooses to display. We store normalized snapshots of those values, not raw API responses. If a value stops being available, we hide it rather than showing a stale or zero figure. Disconnecting stops synchronization immediately and erases the stored token.

• Advertising requests: reviewed for erasure after 12 months.
• Abuse-prevention fingerprints: short-lived, keyed and non-reversible. We do not store raw IP addresses.
• A previous username redirects for 90 days, then stops resolving.
• Security and audit records: a minimized, pseudonymous set for a fixed reviewed period.

Deleting your account makes your public page unavailable immediately, revokes the Instagram authorization, and erases your profile, options, uploaded images and requests. Backups expire on their own schedule and are never restored into the live service without repeating the deletion.

You can request access, correction, deletion, restriction or portability of your data. Contact Nefrin through the support route published with this service. We verify identity without collecting more data than the request requires.