Privacy Policy

When you create an account, we collect your email address and authentication credentials (managed securely via Supabase Auth). If you purchase tokens or subscriptions, payment transactions are handled directly by Stripe, Inc., the global industry leader in payment processing and a certified PCI-DSS Level 1 Service Provider. Analytics Social does NOT collect, store, or save your credit card numbers, expiration dates, or CVV security codes on our servers. Instead, payment information is tokenized and managed directly by Stripe. Analytics Social receives only minimal administrative metadata from Stripe (such as confirmation of payment success, transaction ID, billing country, and the purchased token allocation) strictly to credit your account balance and provision your access.

When you request a comment export, you submit a public Instagram post URL. Our system retrieves publicly available comment text, public author handles, timestamps, and like metrics for analytics and CSV, Excel, or JSON export. We do NOT access private accounts, direct messages (DMs), or private user profiles.

Supabase (Database & Authentication)

We use Supabase as our backend infrastructure provider for secure user authentication, database storage, and PostgreSQL backups. Supabase processes your email address, authentication tokens, profile details, and search query records on our behalf. Data is stored on secure cloud servers protected by encryption in transit (SSL/TLS) and at rest. Supabase acts as a data processor bound by a formal Data Processing Agreement (DPA). For more information, review Supabase's Privacy Policy.

Stripe, Inc. (Payment Processing & Customer Billing Portal)

We partner with Stripe, Inc., the global industry leader and certified PCI-DSS Level 1 payment gateway, to process all subscription billings and one-time token refill transactions. When you purchase tokens or manage your billing, transactions are handled directly by Stripe's encrypted infrastructure. This ensures:

• Your full billing details (card number, CVV, billing address) are encrypted and processed directly by Stripe using bank-grade 256-bit SSL encryption. Analytics Social never saves, stores, or has access to your credit card info.
• Analytics Social receives only minimal transaction notifications (such as confirmation that payment was successful, Stripe customer and subscription IDs, and token package amounts) necessary to fulfill your order.
• Advanced fraud protection and risk scoring powered by Stripe Radar, safeguarding your account against unauthorized transactions.
• Self-service subscription management and invoice retrieval via the integrated Stripe Customer Portal.

For more details on Stripe's data security and privacy practices, review Stripe's Privacy Policy. For billing inquiries or refund requests, review our Refund & Cancellation Policy or reach our support team via our Contact Page.

Google Sign-In / Google OAuth

If you choose to sign in with Google, we receive only your public profile name, verified email address, and avatar URL from Google to create your account. We never receive or store your Google password. For more information, review Google's Privacy Policy.

Google Gemini API (AI & Natural Language Processing)

Used exclusively for on-demand comment sentiment classification, topic clustering, and discussion summarization. Under Google's commercial API Data Protection and Governance terms, customer queries and analysed comments are processed securely in real-time and are never used to train or fine-tune Google's foundation models.

Public Social Data Retrieval Infrastructure

We utilize reliable enterprise cloud infrastructure to retrieve publicly accessible Instagram post metadata and commentary. Analyses only process public posts and never access private accounts, stories, or direct messages.