Privacy Policy

• Account data: your email address and a hashed password (we never store the plain password), or your Google account identifier if you sign in with Google.
• Content you upload: draft posts, captions, and images you submit for simulation.
• Usage data: which features you use and how often (for example, simulations run per month for plan limits).
• Payment data: handled entirely by Paddle, our merchant of record. We never see or store your card details — we receive only subscription status and invoice metadata.

We use one essential, httpOnly session cookie to keep you logged in. We do not use advertising or cross-site tracking cookies.

To provide our analysis, we collect publicly available Instagram data: public profiles, posts, captions, engagement counts, and public comments — for the profile you connect, for creators you choose to follow for inspiration, and for people who publicly engage with those profiles. We never ask for, receive, or store Instagram passwords, and we cannot access private accounts or private messages.

From public commenters we derive fictional, aggregate "AI twins" used to estimate how an audience might react. Twins are labeled personas for your planning — they are not offered as facts about, or statements by, any real person.

If you're not a Engagematic user and believe your public Instagram activity is being processed by us, you can object or request deletion at any time: email support@engagematic.app with your Instagram handle and we'll remove your data from our systems and exclude it from future analysis. Where GDPR or similar laws apply, we process public data under legitimate interest (providing audience analytics to the creators you already chose to engage with publicly), and your objection rights apply in full.

• to provide the service you asked for (analysis, simulations, daily ideas);
• to enforce plan limits and prevent abuse;
• to improve prediction accuracy by comparing predictions to real results;
• to communicate with you about your account.

We do not sell personal data, and we do not use your data for third-party advertising.

We use a small set of processors to run Engagematic:

• Anthropic — AI processing of posts, comments, and your drafts to generate personas and simulations;
• Vercel — hosting; Neon — database;
• RapidAPI — retrieval of public Instagram data;
• Paddle — payments, as merchant of record.

Each processor receives only what it needs to do its job. We may also disclose data if required by law.

Account data is kept while your account is active and deleted on request. Scraped public data and generated analyses are kept while the related profile is active in the product and refreshed or pruned over time. Data is encrypted in transit; passwords are stored only as salted hashes; access to production systems is restricted.

Depending on where you live (including under GDPR and CCPA), you may have rights to access, correct, export, delete, or object to the processing of your personal data. To exercise any of them, email support@engagematic.app. We respond within 30 days. You can also complain to your local data protection authority.

Engagematic is not for children under 16, and we do not knowingly collect their data as customers. If you believe a child is using Engagematic, contact us and we'll delete the account.

We'll announce material changes to this policy in the app or by email. Contact for anything privacy-related: support@engagematic.app.