Privacy policy

Who we are

Pepetravels Studio is an analytics workspace for a creator’s own Instagram account. Strategymate, Calandstraat 7C, 3016 CA Rotterdam, the Netherlands (KvK 86076205, VAT NL004188841B39) operates the service and is responsible for your personal data. Contact us at pepijn@strategymate.io.

Data we collect

• Account data: your name, email address and password hash. We do not store your password in plain text.
• If you choose Google sign-in: your name, email address and Google account ID.
• When you connect an Instagram Professional account through Facebook Login: your long-lived Facebook user access token, encrypted at rest; your chosen Instagram account ID, username and profile picture; the linked Facebook Page ID and name; and the permissions you grant.
• Instagram posts and media metadata, including captions, insights and metrics, thumbnails and extracted frames, plus footage you upload.
• Copies of media stored to display your posts, and content you save through the Chrome extension, including posts you capture.
• If you join the early-access list: your email address, the Instagram handle you enter (optional), the page you signed up from, and a one-way hash of your IP address used only to limit abuse. We use this only to email you about early access.
• Usage and security logs needed to operate and protect the service.

Facebook Login permissions

Facebook Login lets you choose the Instagram Professional account linked to a Facebook Page you manage. We request these permissions:

• instagram_basic: read your Instagram profile and posts to show them in your workspace.
• instagram_manage_insights: read account and post performance to show your analytics.
• instagram_content_publish: publish Reels when you press Publish, once publishing is available to you.
• pages_show_list: list the Facebook Pages you manage so you can choose the linked Instagram account.
• pages_read_engagement: read Page information needed to find and connect the linked Instagram account.
• business_management: access business asset information needed to connect the Page and Instagram account you manage.

If no linked account is found, we may temporarily store your Facebook first name and Page count in an encrypted connection cookie for up to 15 minutes to help you complete setup. When you need to choose an account, this cookie temporarily holds the account choices and connection details.

How we use data

We use your data to provide the workspace, display posts and sync Instagram analytics approximately every 15 minutes. We also use it for security, rate limiting and transactional email, such as password resets. When you use AI analysis, we process the footage or content needed for that analysis.

We use your Meta account details and permissions to connect the account you select. We use the encrypted token to fetch your posts and insights. Reel publishing is rolling out. Where available, Studio publishes only when you press Publish. It does not publish automatically.

Service providers

We share the data needed for each provider’s role with:

• Vercel for hosting, with EU functions in Frankfurt (fra1).
• Neon for database and file storage in EU Frankfurt.
• Cloudflare R2 for storage of uploaded footage originals and previews.
• Resend for email in the EU.
• Anthropic for AI analysis of footage or content when you use that feature.
• Stripe for payments when billing is enabled.
• Google for sign-in if you choose it.

For footage embeddings, clip keyframes are processed on Studio’s own server in Germany.

Google user data

Google user data is used only for sign-in. We do not sell it or use it for advertising. Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Retention

Footage you upload is stored by Studio in its original quality, with previews and keyframes. You can request deletion in Footage; Studio deletes its stored originals, previews, and keyframes. Copies on your phone or computer stay there.

We retain your data until you delete your workspace or ask us to delete it. Settings → Delete workspace removes your posts, media and analytics. You can also request deletion by emailing us. Information we must retain to meet legal obligations, such as billing records, is kept only for as long as required.

Early-access list entries are kept until early access opens or you ask us to remove you, whichever comes first.

Delete your data

Follow our data deletion instructions to permanently delete your workspace and its stored connection details, posts, media, insights and uploaded footage, or request deletion by email. We handle email deletion requests within 30 days.

Settings → Disconnect stops Studio’s access and replaces the stored token. It keeps your account details, posts, media and analytics until you delete the workspace or request deletion.

You can also revoke access in Facebook → Settings → Business Integrations by selecting the app connected to Studio and choosing Remove. Revoking access does not by itself delete data already stored in Studio. Delete the workspace or email us to remove that data.

Your rights

Under the GDPR, you can request access, correction, deletion or portability of your personal data, restrict processing, or object to processing. Where we rely on consent, you can withdraw it at any time. Email pepijn@strategymate.io to exercise these rights. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Cookies and advertising

We use only strictly necessary session and security cookies. We do not use tracking or advertising cookies, and we do not sell your personal data.