Privacy Policy

Account details. Your name, email address and a password. Passwords are stored only as a bcrypt hash — we never store or have access to your plaintext password.

Content you upload. Images you upload as design inspiration, photos used to create an AI avatar, and any text, topics or scripts you enter into the content tools.

Payment details. If you subscribe or buy credits, your card is processed by Stripe. We never receive or store your full card number — we store only a Stripe customer reference, your plan, and your subscription status.

If you choose to connect an Instagram account, you authorise us through Instagram’s official OAuth flow. We request only two permissions:instagram_business_basicandinstagram_business_manage_insights.

With those permissions we read:

• your public profile — username, name, profile picture, follower and following counts;
• your media — captions, thumbnails, permalinks and post timestamps;
• your insights — views, reach, likes, comments, shares, saves and average watch time.

We use this strictly to power the analytics and AI recommendations we show back to you. We never post to your account, never message anyone on your behalf, and never sell, rent or share your Instagram data with advertisers or data brokers.

We do not scrape Instagram for other people’s private data. Where you research another creator, we read only publicly available information from their public profile or post.

To operate your account, sync and display your metrics, generate content and strategy recommendations, meter your AI credit usage, process payments, calculate affiliate commissions if you join that program, and to keep the service secure and working.

We do not use your data to train our own models, and we do not sell your personal information.

We share the minimum necessary with providers that operate parts of the service:

• Anthropic — powers content analysis, scripts, carousels and strategy.
• OpenAI — optional audio transcription.
• HeyGen, ElevenLabs, Higgsfield — optional AI avatar, voice and video features, used only if you use those features.
• Canva — only if you connect Canva to export a design.
• Stripe — payments, subscriptions and affiliate payouts.
• Supabase — database hosting.
• Vercel — application hosting and privacy-friendly, aggregate usage analytics.

Content you send to an AI provider is processed to return your result. We do not authorise these providers to use your content to train their models.

We use a single essential, HTTP-only session cookie to keep you signed in, plus a short-lived cookie during OAuth to protect against cross-site request forgery. If you arrive through an affiliate link we store a referral cookie for 60 days so the referring affiliate is credited. We do not use advertising or cross-site tracking cookies.

We keep your data for as long as your account is open. You can disconnect an Instagram account at any time in Settings, which removes our stored copy of that account’s data and revokes our access token.

To delete everything: email info@concentricfinance.com from your account address and ask us to delete your account. We will erase your account, Instagram data, uploads and generated content within 30 days, except records we are required to retain for tax or accounting purposes.

You can also revoke our access directly from Instagram at any time under Settings → Website Permissions → Apps and Websites.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to processing, and to withdraw consent. Contact us at the address below and we will action your request. Residents of the EEA and UK may also complain to their local data protection authority.

Data is transmitted over TLS and stored on managed infrastructure with encryption at rest. Passwords are hashed. Access tokens are stored server-side and never exposed to the browser. No system is perfectly secure, but we work to protect your data and will notify you promptly if a breach affects it.

CreatorLens is not intended for anyone under 13, and you must be at least 18 to purchase a paid plan. We do not knowingly collect data from children.

If we make a material change to this policy we will update the date above and notify account holders. Questions, requests or complaints: info@concentricfinance.com.