Privacy Policy
Last updated: April 2026
1. What we collect
When you create an account, we collect your email address and a password hash. When you import an Instagram data export, we store your public posts, reels, captions, profile photo, bio, and website URL from that export. We never access your Instagram account directly, and we never see your direct messages, followers list, or login credentials.
2. Subscriber data
Your subscribers' email addresses and push notification endpoints are stored on your behalf. You own this data. We use it solely to deliver the notifications you choose to send. We do not sell it, share it with third parties, or use it for our own marketing.
3. Google Drive (optional)
If you connect Google Drive for automatic sync, we request read-only access scoped to the specific folder you share with us. We only read Instagram export files from that folder. We store an OAuth refresh token so the sync can run without your manual involvement. You can revoke access at any time from your Google account settings.
4. How we use your data
We use your data to operate the service: hosting your public profile, delivering broadcasts to your subscribers, and showing you analytics about your posts. We may send you transactional emails about your account (confirm email, password reset, import completed). We do not send marketing emails unless you opt in.
5. Data retention
If you delete your account, we delete your profile, posts, and personal data within 30 days. Subscriber email addresses associated with your handle are also deleted, and we notify them that the list they joined no longer exists. Billing records may be retained for up to 7 years as required by law.
6. Third-party services
We use Supabase for database and authentication, Resend for transactional email, Stripe for payment processing, and Vercel for hosting. Each of these providers has its own privacy policy. We do not use advertising networks or analytics trackers.
7. Cookies
We use a single session cookie to keep you logged in. We do not use advertising cookies or third-party tracking cookies.
8. Your rights
You can export or delete your data at any time from the dashboard. If you have questions or requests about your data, email us at privacy@owdience.com.
9. Changes
We may update this policy. If we make material changes, we will notify you by email or by posting a notice on your dashboard before the changes take effect.