Privacy Policy
Last updated: August 14, 2026
Our Privacy & Compliance Commitments
1. Overview & Data Controller
This Privacy Policy governs the manner in which IG Media Analytics(“we”, “our”, or “the Platform”) collects, uses, maintains, and discloses information collected from users of the website and SaaS application.
We operate as an independent social media analytics and sentiment data export provider. We are committed to processing data responsibly, lawfully, and transparently in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and international privacy frameworks.
2. Information We Collect
We collect information in two categories:
When you create an account, we collect your email address and authentication credentials (managed securely via Supabase Auth). If you purchase tokens or subscriptions, payment transactions are processed securely by our authorized PCI-DSS compliant Merchant of Record and payment processing infrastructure partners. We never store credit card numbers on our servers.
When you request a comment export, you submit a public Instagram post URL. Our system retrieves publicly available comment text, public author handles, timestamps, and like metrics for analytics and CSV, Excel, or JSON export. We do NOT access private accounts, direct messages (DMs), or private user profiles.
3. How We Use Collected Data
We use the information collected solely for the following legitimate purposes:
- To provide and deliver public comment analytics, sentiment filtering, and data export features.
- To manage your token balance, usage audit logs, and account authentication.
- To detect, prevent, and mitigate security threats, API abuse, and fraudulent activity.
- To comply with statutory legal obligations and payment processor requirements.
4. Third-Party Service Providers
We do not sell, rent, or trade personal data to third parties. We share information only with trusted infrastructure providers that act as data processors under our strict instructions to operate the platform:
Supabase (Database & Authentication)
We use Supabase as our backend infrastructure provider for secure user authentication, database storage, and PostgreSQL backups. Supabase processes your email address, authentication tokens, profile details, and search query records on our behalf. Data is stored on secure cloud servers protected by encryption in transit (SSL/TLS) and at rest. Supabase acts as a data processor bound by a formal Data Processing Agreement (DPA). For more information, review Supabase's Privacy Policy.
Authorized Payment Processors & Merchant of Record
We partner with authorized PCI-DSS compliant Merchant of Record (MoR) and high-security payment facilitators to process payments for subscriptions and token refills. When you purchase token refills or subscription plans, all payment transactions are handled directly by our payment infrastructure partners. This ensures:
- Your full billing details (card number, CVC, billing address) are collected and processed securely using 256-bit SSL encryption. IG Media Analytics never stores your credit card numbers on our servers.
- The Merchant of Record acts as the legal facilitator responsible for international payment compliance, sales tax/VAT collection and remittance, and fraud prevention.
- IG Media Analytics receives only confirmation of payment and token pack allocations.
For questions regarding billing or to request subscription cancellation, review our Refund & Cancellation Policy or email our support team at hi@ig.media or submit a ticket via our Contact Page.
Google Sign-In / Google OAuth
If you choose to sign in with Google, we receive only your public profile name, verified email address, and avatar URL from Google to create your account. We never receive or store your Google password. For more information, review Google's Privacy Policy.
Google Gemini API (AI & Natural Language Processing)
Used exclusively for on-demand comment sentiment classification, topic clustering, and discussion summarization. Under Google's commercial API Data Protection and Governance terms, customer queries and extracted comments are processed securely in real-time and are never used to train or fine-tune Google's foundation models.
Upstream Social Media Feeds (RapidAPI / Apify)
We utilize reliable enterprise API gateways to retrieve publicly accessible Instagram post metadata and commentary. Extractions only process public posts and never access private accounts, stories, or direct messages.
All third-party service providers are contractually required to maintain strict data security and confidentiality standards and are prohibited from using your data for their own independent marketing purposes.
5. Your Rights (GDPR & CCPA)
Depending on your jurisdiction, you have the right to:
- Access & Portability: Request an export of your account and saved search history in structured JSON format.
- Rectification & Erasure: Request the deletion of your account and all associated extracted post history from our database.
- Revocation of Consent: Close your account at any time with immediate cessation of data processing.
To exercise any of these rights, submit a request via our Contact & Privacy Support Form.
6. Cookies & Tracking
We use strictly necessary session cookies for user authentication and security tokens. We do not use intrusive third-party cross-site advertising trackers. For full details, please review our Cookie Policy.
7. Disclaimer Regarding Meta & Instagram
Independent Service Notice: IG Media Analytics is an independent software tool and is not affiliated, associated, authorized, endorsed by, or in any way officially connected with Instagram, Meta Platforms, Inc., or any of their subsidiaries. All product and company names are trademarks™ or registered® trademarks of their respective holders.
8. Contact & Data Privacy Inquiries
For data privacy inquiries, GDPR/CCPA data export or deletion requests, or support questions, please email us at hi@ig.media or reach our team directly through our dedicated Contact Page.