Privacy Policy

1. Introduction

Humans ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide to Us

• Account Information: When you create an account, we collect your name, email address, and password.
• Profile Information: Any additional information you choose to provide in your profile or account settings.
• Payment Information: When you subscribe to a paid plan, our payment processor Stripe collects your payment information. We do not store your credit card details on our servers.
• Custom Data: Any custom fields, notes, tags, or other information you create and store in the Service.

2.2 Information from Instagram/Facebook

When you connect your Instagram account through Facebook Login, we collect:

• Your Instagram username and profile information
• List of accounts you follow and accounts that follow you (followers)
• Profile pictures, usernames, and public information of your connections
• Any other information you explicitly authorize during the authentication process

We only access the data you explicitly authorize during the Facebook/Instagram authentication process. We comply with Meta's Platform Terms and Instagram's API Terms of Use.

2.3 Automatically Collected Information

• Log Data: IP address, browser type, operating system, pages visited, time and date of visits, time spent on pages, and other diagnostic data
• Device Information: Device type, unique device identifiers, and mobile network information
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to track activity on our Service and store certain information
• Usage Data: How you interact with the Service, features you use, and actions you take

3. How We Use Your Information

We use the collected information for the following purposes:

• To Provide the Service: Import, sync, organize, and display your Instagram connections
• To Manage Your Account: Create and maintain your account, process subscriptions, and provide customer support
• To Process Payments: Process your subscription payments through Stripe
• To Improve the Service: Analyze usage patterns, fix bugs, and develop new features
• To Communicate with You: Send service updates, security alerts, and support messages
• To Ensure Security: Detect, prevent, and address fraud, security issues, and technical problems
• To Comply with Legal Obligations: Comply with applicable laws, regulations, and legal processes
• With Your Consent: For any other purpose disclosed to you with your consent

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Stripe: Payment processing and subscription management
• Clerk: Authentication and user management
• Cloud Hosting Providers: Data storage and application hosting
• Analytics Providers: Usage analytics and performance monitoring

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Team Members

If you invite team members to your organization, they will have access to the connection data within that organization based on their assigned role and permissions.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), including to:

• Comply with legal obligations
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the personal safety of users or the public
• Protect against legal liability

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit using SSL/TLS
• Encryption of data at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Regular backups and disaster recovery procedures
• Employee training on data protection and security

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: We retain your data for as long as your account is active
• Cancelled Accounts: After you cancel your account, we retain your data for 30 days in case you wish to reactivate
• Deleted Data: After 30 days of account cancellation, we permanently delete your data from our active systems
• Backups: Data may remain in backups for up to 90 days for disaster recovery purposes
• Legal Requirements: We may retain certain information as required by law or for legitimate business purposes

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

You have the right to access your personal information and request a copy of your data in a portable format.

7.2 Correction

You have the right to correct inaccurate or incomplete personal information. You can update most information directly through your account settings.

7.3 Deletion

You have the right to request deletion of your personal information. You can delete your account through your account settings or contact us for assistance.

7.4 Objection and Restriction

You have the right to object to or request restriction of certain processing of your personal information.

7.5 Withdraw Consent

Where we rely on your consent to process your information, you have the right to withdraw that consent at any time. This includes disconnecting your Instagram account.

7.6 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@humans.app. We will respond to your request within 30 days.

8. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

9. Children's Privacy

Our Service is not intended for children under 13 years of age (or 16 in the European Union). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

10. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights regarding your personal information:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your rights

We do not sell your personal information. To exercise your rights, contact us at privacy@humans.app.

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Keep you signed in
• Remember your preferences
• Understand how you use the Service
• Improve Service performance

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of the Service.

13. Third-Party Links

Our Service may contain links to third-party websites and services, including Instagram and Facebook. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification for material changes

Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@humans.app

Data Protection Officer: dpo@humans.app