Privacy Policy

This policy describes information handled when you visit the InstaPV API website, create an account, use the API, make a payment, or contact support. The site operator is referred to as “InstaPV API,” “we,” or “us.” The contact form destination is configured by the site administrator.

Information we handle

• Account information: details such as your name, email address, company information, role, and account status. Passwords are stored as hashes rather than readable passwords.
• API and security records: API key identifiers, endpoint and method, request parameters, response status, provider/cache outcome, timing, and security events. Operational API and security logs may include client IP addresses and user-agent details to authenticate requests, enforce limits, investigate abuse, and troubleshoot service issues. Never put passwords, session cookies, payment-card data, or API secrets in request parameters.
• Payments and credits: top-up references, amounts, credit adjustments, plan details, and transaction status. Payment details are handled by the payment provider used for the transaction; InstaPV API does not ask you to email full card credentials.
• Support messages: information you choose to submit in the contact form or support area. Contact form messages are sent to the configured support inbox and are not stored as contact-form records in the application database. The mail host and mailbox may retain messages under their own settings.
• Essential browser storage: a session cookie for sign-in and security, and local storage for the theme preference.
• Aggregate public-site analytics: hourly totals for public page views and approximate visible time, grouped by path, referral/campaign information, broad device category, and country code when available. This analytics does not create visitor or session identifiers and does not store raw IP addresses or user-agent strings for those measurements. Aggregate analytics is retained for up to 13 months.

Public Instagram data and providers

When a request is routed upstream, the selected provider receives the public username, media identifier, and other request information needed to fulfill that route. Provider coverage and data can vary. InstaPV API does not request Instagram passwords or session cookies and does not provide private-account access through this service.

How information is used

We use information to operate accounts and API keys, route requests, apply account limits and credit charges, process payments and adjustments, secure the website, prevent abuse, diagnose failures, answer support requests, and meet legal obligations.

When information is shared

Information may be processed by the website host and database provider, mail host used to deliver contact messages, payment services used for transactions, security providers, and upstream API providers needed to fulfill a requested route. Each provider's own privacy terms may apply.

Advertising

If Google advertising or measurement tools are enabled, Google and its partners may receive browser or device information and use cookies or similar technologies for ad delivery, measurement, fraud prevention, or personalization. Their handling of that information is governed by their own privacy terms and the advertising configuration. We will configure advertising in accordance with applicable consent and disclosure requirements. See the Cookie Notice and Google Privacy Policy.

Retention and security

We retain account, transaction, support, and operational records for as long as reasonably needed for service delivery, security, billing, dispute resolution, and legal requirements. Retention varies by record type. Access controls and credential-protection measures are used to protect the service, but no online system can guarantee absolute security.

Your choices and requests

Depending on your location, you may have rights to request access, correction, deletion, portability, or restriction of personal information, or to object to certain processing. Submit a request through the contact form. We may verify your identity and retain information where required for security, billing, or law.

Children and changes

The service is intended for people able to enter into agreements under the laws that apply to them and is not designed for children. We may update this policy when the service or its providers change. The current version is published on this page; material changes will be reflected here.

Contact

For privacy questions or requests, use the Contact Us page.

Google sign-in

If Google sign-in is enabled, Google provides an account identifier and verified email address, and may provide your name and profile details. We use this information to authenticate you, create or link your InstaPV API account, protect access, and maintain sign-in records. We do not receive your Google password. Google sign-in is optional; password sign-in remains available when enabled. Google's own privacy terms apply to its processing.