Privacy policy

This policy explains what InaivuOS (“InaivuOS”, “we”) collects when you use InaivuOS as a creator or a brand, what we read from your Instagram and YouTube accounts if you choose to connect them, what we do with it, and how you can remove it. You can reach us at the contact address given on our website.

What we collect

• Your account. Name, email address, phone number, role (creator or brand), and the details you add to your profile: photo, bio, location, languages, niche.
• Brand details. For brands: company name, logo, industry, website, and billing details such as a GSTIN and address when you pay or launch a campaign.
• Deals and payments. Campaigns, invites, deals, invoices and payment status. For creators, the payout details you add (UPI ID, or bank account number and IFSC, and PAN) so we can pay you. Brands' card payments are handled by our payment provider; we do not store card numbers.
• Instagram and YouTube, only if you connect them. See the next section.

What we read from Instagram and YouTube

We connect only through the platforms’ official sign-in. We never see or store your Instagram or Google password. Access is read-only: we cannot post, comment, message, or change anything on your accounts.

• Instagram (through Instagram sign-in; your account must be an Instagram Business or Creator account): your username, profile picture, follower count and number of posts; for your recent posts, the likes, comments, views, reach, saves and shares; your account’s daily reach; and, if you have enough followers, the aggregate share of your followers by gender, age group, city and country.
• YouTube (through Google sign-in): your channel name, picture, subscriber, view and video counts; for your recent videos, the views, likes and comments; and, if you allow it, the aggregate share of your viewers by age group, gender and country.
• We do not read your private messages, the text of comments, your followers’ names or any individual viewer.

Why we use it

• To show you your own numbers and growth on your dashboard.
• To suggest what you could charge for sponsored content.
• To build your media kit. Your kit is public only after you publish it, and you choose whether the audience breakdown appears on it. Until you publish, brands cannot see it or find you in search.
• To let brands check a creator’s numbers before inviting them to a campaign.

We do not sell your data, we do not use it for advertising, and we do not use it to train machine-learning models. We do not send your Instagram or YouTube data to third-party AI services.

Who else sees it

• Brands and the public see only what is on the media kit you publish: your reach, engagement, average views, follower growth, rates, the brands you have worked with, and, if you leave it on, your audience shares. They never see your access tokens or any individual follower.
• Service providers that run InaivuOS for us: cloud hosting and database, image hosting, email and SMS delivery, and payment processing. They handle data only on our instructions.
• Authorities, where the law requires it.

How long we keep it, and how to remove it

• Disconnect any time in Settings → Connected accounts. We ask Instagram or Google to end our access, then delete the connection and every number we stored from it.
• If access is lost (you removed InaivuOS in your Instagram or Google settings, a password changed, or a connection expired) and you do not reconnect within 7 days, we delete what we stored. If you remove InaivuOS in your Instagram settings, Instagram tells us and we delete it straight away.
• Ask us to delete your data through Instagram’s data-deletion option for apps, or by emailing us. Instagram data is erased immediately and you can check the request on our data deletion page.
• Our activity log keeps records of actions such as connecting or disconnecting an account (the platform and handle, never a token) for 60 days.
• Invoices and payment records are kept as long as tax and accounting law require.

Security

Connections to InaivuOS are encrypted in transit. The access tokens we hold for Instagram and YouTube are encrypted before they are stored, and only the services that need them can read them. Access to our systems is limited to the people who need it, and actions on accounts are logged.

Google and YouTube

InaivuOS’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. By connecting YouTube you also agree to be bound by the YouTube Terms of Service and the Google Privacy Policy. You can revoke InaivuOS’s access to your Google account at any time in your Google security settings.

Meta and Instagram

You can remove InaivuOS at any time in your Instagram settings under Apps and websites. When you do, Instagram notifies us and we delete the Instagram data we hold for you.

Your rights

You can see and correct your profile in Settings, disconnect accounts, switch off your public media kit or its audience section, and ask us to delete your account and data. Under the laws that apply to you, including India’s Digital Personal Data Protection Act, 2023, you may also have the right to access, correct and erase your personal data and to complain about how it is handled. Write to the contact address given on our website and we will respond.

Changes

If we change what we read, keep or share, we will update this page and, for anything significant, tell you in the app before it takes effect.