Privacy Policy

Last updated: 1 July 2026 · Effective: 1 July 2026

This Privacy Policy describes how Stonehenge Labs ("we", "us", or "our") collects, uses, and protects your information when you use Creator Cockpit at rivalgram-nextjs.vercel.app (the "Service").

1. Information We Collect

Instagram / Facebook Data (via OAuth)

When you connect your Instagram account, we access:

• Your Instagram username and profile information
• Your total post count and engagement rate
• Your follower count
• Metadata about your recent posts (not the content of private messages)

We request only the permissions necessary to provide the Service and do not access your private messages, contacts, or payment information stored on Instagram.

Content You Generate

Hooks, captions, hashtags, and other content generated using our AI tools are stored temporarily in our database to power the Calendar and Queue features. You can delete this data at any time.

Usage Data

We collect gem balance, plan type, and tool usage counts to operate the credit system and prevent abuse.

Payment Data

Payments are processed by Razorpay. We do not store your card details. Razorpay's privacy policy governs their handling of payment data.

2. How We Use Your Information

• To display your Instagram stats and growth data in your dashboard
• To generate personalised AI content recommendations based on your niche and profile
• To operate the gem credit system and process payments
• To store your content queue and posting schedule
• To improve the accuracy of our AI tools over time

We do not sell your data. We do not use your Instagram data to train AI models. We do not share your data with advertisers.

3. Data Storage & Security

Your data is stored in Upstash Redis (encrypted at rest, hosted in AWS). Access tokens are encrypted before storage. We use HTTPS for all data in transit.

Access tokens expire as defined by Meta's platform policies. You can revoke access at any time from your Instagram app settings under Settings → Apps and Websites.

4. Data Retention

• Instagram access tokens: Stored until you disconnect your account or revoke access via Instagram
• Generated content: Stored for 90 days, then automatically deleted
• Queue & calendar data: Stored for 90 days after last activity
• Analytics data: Retained for the duration of your account

5. Third-Party Services

We use the following third-party services to operate Creator Cockpit:

• Meta (Instagram Graph API) — Instagram account connection and data access
• Anthropic Claude — AI content generation (your content is not used to train Anthropic's models per their API terms)
• Replicate — AI thumbnail image generation
• Upstash Redis — Data storage
• Razorpay — Payment processing
• Vercel — Hosting and infrastructure

6. Your Rights

You have the right to:

• Access the data we hold about you
• Request deletion of your data
• Disconnect your Instagram account at any time
• Export your generated content

To request data deletion, visit our Data Deletion page or email us at privacy@rivalgram.com.

7. Children's Privacy

Creator Cockpit is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us immediately.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by displaying a notice in the app. Continued use of the Service after changes constitutes acceptance of the new policy.

9. Contact Us

For privacy-related questions or data requests:

• Email: privacy@rivalgram.com
• Company: Stonehenge Labs
• Website: rivalgram-nextjs.vercel.app