Privacy Policy

Data controller: Qirevo (qirevo-production.up.railway.app). Privacy requests: support@qirevo.pro.

Qirevo account: email, optional name, password hash, plan, subscription dates.

Subscription and billing data: plan status, transaction IDs, and billing metadata from our payment provider. Full card details are processed only by the provider; Qirevo does not store them.

Public Instagram @username (optional): handle, niche, aggregated stats and open-profile information — no Instagram password.

Instagram via Meta OAuth (when available): account ID, username, access tokens, and data needed for enabled features.

Technical data: session cookies, IP, request logs for security.

If you enter a @username without Meta login, we request only information Instagram shows visitors of a public (non-private) profile: e.g. follower count, bio, public posts, and metrics available without logging in.

Legal basis (GDPR): contract performance (analytics you requested) and legitimate interests (service operation and security). You confirm you own the profile or are authorized to monitor it.

Private profiles are not supported. We do not access DMs, passwords, or login-only data without official Meta OAuth.

We use Apify as a processor to fetch public data. We send minimal data (username and query parameters); see apify.com/privacy-policy. Results are stored in our database (Railway/PostgreSQL) linked to your Qirevo account.

You can remove a linked @username in Instagram accounts — related aggregated data will be deleted within a reasonable time.

We use data to provide and improve the service, authenticate users, enforce plan limits, manage subscriptions and auto-renewal cancellation, support customers, and comply with law.

Text generation uses Anthropic's API; prompts and shop settings may be sent without customer PII unless you include it.

Processors: Polar (or other Merchant of Record / payment provider) — payments, invoices, and taxes; Anthropic/OpenAI (generation), Apify (public Instagram data by @username), Meta/Instagram (OAuth), Railway (hosting & PostgreSQL).

Transfers outside the EEA (e.g. USA) may rely on Standard Contractual Clauses (SCC) or other GDPR mechanisms.

We do not sell personal data. Disclosure may occur when required by law or to protect rights and safety.

Account data is kept while the account is active. After deletion we remove or anonymize within a reasonable time unless law requires retention.

Revoke Instagram tokens via Meta or disconnect in Qirevo.

Depending on your location you may request access, correction, deletion, restriction, or portability. Email support@qirevo.pro — we respond per GDPR and local law timelines.

You may lodge a complaint with your data protection authority.

We use HTTPS, password hashing, and access controls. No internet transmission is 100% secure.

The service is not directed at children under 16. We do not knowingly collect children's data.

Updates are posted on this page. Significant changes will be notified by email or in-app when possible.

support@qirevo.pro for privacy and data requests.

Instagram, Facebook, and Meta are trademarks of Meta Platforms, Inc. Qirevo is not affiliated with or endorsed by Meta. Mentions are for integration and public-profile analytics only.