Privacy Policy

Effective June 17, 2026

INFJ Studio Inc (“we”, “us”) operates SocialBase (the “Service”), which — on your instruction — replies to comments and direct messages on the Instagram professional accounts you connect. This policy explains what we collect, how we use it, and your choices. Questions: support@socialbasehq.com.

Information we collect

• Account & billing.Your name and email (via our authentication provider), and, if you subscribe, billing details processed by our payment provider — we never store full card numbers.
• Connected Instagram data.When you connect an Instagram professional account through Instagram’s official login, we access, strictly to run the automations you configure: your account profile (user ID, username, name, profile picture, follower count); comments on your posts and direct messages in your account — delivered by Instagram’s webhooks — including the commenter’s or sender’s Instagram-scoped ID, username, and the message text; and an access token for your account, stored encrypted at rest (AES-256-GCM).
• Content you create. The automations, keywords, reply templates, and knowledge you configure, and the conversation and lead records the Service generates.
• Technical. Standard logs needed to operate and secure the Service.

How we use information

We use your information solely to provide the Service you configure: to detect a comment matching your keyword, post the public and private replies you set up, send and receive direct messages within Instagram’s messaging window, qualify leads, and show conversations in your inbox. We do not use Instagram data for any purpose other than operating your automations, and we do not sell your data or the data of people who interact with your account.

How we share information

We do not sell data. We share data only with service providers that help us run the Service, each under its own terms:

• Meta Platforms / Instagram — the platform the automations run on.
• Stripe — subscription billing.
• Clerk — account authentication.
• Neon — database hosting.
• Vercel — application hosting.
• Anthropic — to draft reply wording, when AI replies are enabled.

We may also disclose information if required by law.

Storage & security

Access tokens are encrypted at rest with AES-256-GCM. Data is hosted with the providers listed above, and we limit access to what is needed to operate the Service.

Data retention & deletion

You stay in control of your data:

• Disconnect an Instagram account anytime in the app (Accounts) to revoke its access and delete its stored token.
• Remove SocialBase from your Instagram account — Instagram notifies us and we disconnect it automatically.
• Delete your account and all associated data by emailing support@socialbasehq.com from your account address. See our Data Deletion instructions. We also honor Meta’s data-deletion callback.

We retain your information while your account is active. Disconnecting an account removes its access and stored token but keeps the lead records you have already captured; deleting your account erases everything.

Your rights

You may request access to, correction of, or deletion of your data by emailing support@socialbasehq.com.

Children

The Service is for businesses and is not directed to anyone under 18.

Changes

We may update this policy; we will post the new effective date here.

Contact

INFJ Studio Inc — support@socialbasehq.com