Privacy Policy

The short version

We collect your email, what you watch, and how you use the product. We don't sell it, we don't run ad trackers, and you can have it deleted by asking. Payment card details never touch our servers.

Who we are

Savreon, WeWork Raheja Woods, 8 Central Avenue, Kalyani Nagar, Pune, India, is the data controller for the information described here. Contact: [email protected].

What we collect, and why

If you create an account

• Email address — to identify you, send service notices, and deliver alerts. Required.
• Password — stored only as a salted cryptographic hash. We cannot read it, and we can't tell you what it is.
• Workspace name, and the Instagram handles you choose to watch — this is the product working.
• Alert settings — including a Slack, Discord, Telegram or webhook destination if you add one.

Automatically

• A session cookie when you're signed in. Strictly necessary for login; it holds a signed user ID and nothing else. We set no advertising or cross-site tracking cookies.
• Server logs — request paths, timestamps and errors, kept for operational debugging.

Public Instagram data

We collect publicly visible information about the accounts our customers choose to watch: username, display name, follower count, and public post metrics. This is the same information any logged-out visitor can see. We do not collect private accounts, we do not log into Instagram as you, and we never ask for your Instagram password.

If you are an Instagram creator and want your public account excluded from our collection, email us and we'll do it.

Legal bases (UK/EU GDPR)

• Contract — running the account and service you signed up for.
• Legitimate interests — security, rate limiting, preventing abuse, and improving the product.
• Legal obligation — tax and accounting records.
• Consent — marketing email, if you ever opt in. You can withdraw it at any time.

Sharing

We use a small number of service providers to operate BreakoutDesk — for hosting and infrastructure, payment processing, email delivery, and data collection and processing. Each receives only what it needs to perform that function and is not permitted to use it for anything else.

We do not sell personal data, and we do not share it with advertisers. We may disclose it if legally compelled, in which case we'll tell you unless we're prohibited from doing so.

Payments are processed by Paddle.com as our Merchant of Record. Your card details go directly to Paddle and never reach our servers.

Where your data goes

Our providers operate internationally, so your data may be processed outside your country, including in the EU, UK, US and India. Where required, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

If you need the current list of our sub-processors — for a vendor review or a data protection assessment — email [email protected] and we'll send it.

How long we keep it

• Account data — while your account exists, then deleted within 30 days of closure.
• Collected Instagram metrics — retained as historical data, at decreasing resolution as it ages.
• Billing records — as long as tax law requires, typically 7 years.

Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to processing based on legitimate interests. Email [email protected] and we'll respond within 30 days. There's no charge.

If you're in the UK or EU and think we've handled this badly, you can complain to your local data protection authority.

Security

Traffic is encrypted in transit. Passwords are salted and hashed. Sessions are signed and expire. Backups are encrypted. Access to production systems is limited to people who need it.

No system is perfectly secure. If we ever suffer a breach affecting your data, we'll tell you and the relevant regulator without undue delay.

Children

The service isn't for anyone under 18, and we don't knowingly collect their data.

Changes

We'll update this page when things change, and email you if a change materially affects you. The date at the top always reflects the current version.