Privacy Policy

1. Introduction

Iris ("we", "our", or "us") is a content intelligence platform for Instagram creators. This Privacy Policy explains how we collect, use, and safeguard your information when you connect your Instagram account and use our platform.

2. Information We Collect

When you connect your Instagram account to Iris, we collect:

• Your Instagram profile information (username, profile picture, follower count, media count)
• Your published content metadata (captions, timestamps, permalinks, media types)
• Your content performance metrics including saves, shares, reach, views, likes, and comments — these are private metrics only accessible with your explicit authorization via Instagram API
• Thumbnail images of your posts and reels
• Your Google account email and name (used for authentication)

3. How We Use Your Information

• To provide you with content analytics and insights about your own posts and reels
• To power your personal AI content brain — understanding your voice, themes, and what performs best
• If you opt in: to include your content in the Iris network discovery feed, allowing other creators to find and learn from top-performing content across the network
• If you opt in: to include your anonymized performance metrics in aggregate niche benchmarks
• To improve our platform and develop new features

4. Consent and Sharing Controls

Your data sharing is controlled by explicit consent toggles:

• Share Metrics — controls whether your performance metrics (saves, shares, reach) are visible to other creators in the network. Default: OFF.
• Share Content — controls whether your content (captions, thumbnails) appears in the Discover feed. Default: OFF.
• Visible in Network — controls whether your creator profile appears in the Iris network. Default: OFF.

All sharing defaults to OFF. You must explicitly opt in to share any data with the network. Your private content brain works regardless of these settings.

5. Instagram API Usage

We access your Instagram data through the official Instagram API with permissions you explicitly grant during the connection process. We request only the permissions necessary to provide our service: basic profile information and content insights. We do not access your direct messages, and we do not post content or take any actions on your behalf.

6. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Supabase with encryption at rest. Our web application is hosted on Vercel. Access tokens are stored securely and are only used to refresh your content data. We implement industry-standard security measures to protect your data.

7. Third-Party Services

• Supabase: Database hosting and authentication
• Vercel: Web application hosting
• OpenAI / Anthropic: AI analysis of your content (your data is not used to train their models)

We do not sell, rent, or share your personal data with any other third parties. Aggregate, anonymized benchmarks may be shared with the network only with your opt-in consent.

8. Data Retention

We retain your data for as long as your account is active. If you disconnect your Instagram account, we will stop syncing new data. If you request deletion, we will remove or anonymize your data within 30 days. Content that has been shared in the network with your consent will be removed from the discovery feed upon disconnect or deletion request.

9. Your Rights

• Access your personal data at any time through the platform
• Request correction of inaccurate data
• Request deletion of your data (see Data Deletion)
• Disconnect your Instagram account at any time to stop data collection
• Control what data is shared with the network via consent toggles
• Export your data upon request

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: support@useiris.dev
Business: Escape Velocity Ventures