Privacy Policy

Last updated: 3 October 2026

This policy explains what Pixtale Growth collects, why, and the choices you have. Pixtale Growth is an analytics dashboard for Instagram and YouTube creators and small businesses, with users in the United Kingdom, Ireland and the European Union, among others.

Who we are

Pixtale Growth is the data controller for the information described here. Contact: arvind.vfx27@gmail.com.

What we collect

• Account details you give us: your name and email address when you create an account.
• Instagram data, only if you connect Instagram: through Instagram’s official API and only with the permissions you approve (instagram_business_basic, instagram_business_manage_insights): your username, profile picture, follower and media counts, your posts and their metrics (such as reach, views, likes, comments, shares and saves), account-level insights, and aggregated audience demographics where Instagram provides them.
• Public profile lookups: when you search a public Instagram username, we request that account’s public information (profile, follower count and recent public posts) through our data provider SocialCrawl (socialcrawl.dev), which returns information the account has made public. We store the result for up to 24 hours to avoid repeat requests, keep simple follower and engagement snapshots to show growth over time, and don’t combine it with data from connected accounts.
• AI analysis: to write the AI analysis, our server sends the public numbers, captions and, on paid plans, a sample of public comments from the analysed account to OpenAI’s API. We don’t send your email, password or payment details. Under OpenAI’s API terms, data sent through the API isn’t used to train their models by default. Results are stored so the same analysis isn’t generated twice.
• Your account: if you create an account we store your name, email, a securely hashed password, your plan and payment status, and a count of the analyses you run.
• Technical data: a session cookie needed to keep you signed in, and basic server logs (such as IP address and error messages) used for security and rate limiting.

What we don’t do

• We never ask for or see your Instagram password. Sign-in happens on Instagram.
• We never post, comment, message or change anything on your account. Access is read-only.
• We don’t sell your data or use it for advertising.
• We don’t access private information of other people’s accounts.

How we use it

To show your analytics dashboard, calculate trends and engagement, generate recommendations from your own numbers, and keep the service secure. Legal basis: performance of our contract with you, and our legitimate interest in running a secure service.

Storage and security

Instagram access tokens are encrypted (AES-256-GCM) and stored on our server; they are never sent to your browser. Data is transmitted over HTTPS. Analytics responses are cached for short periods (15 minutes to 6 hours) to respect Instagram’s rate limits.

Service providers

We use Netlify (hosting and serverless functions) and Meta Platforms (the Instagram API). They process data only to provide those services. We also use OpenAI to generate AI analysis from public profile data, and Razorpay to process payments. Card, UPI and bank details are entered on Razorpay’s secure checkout and never reach our servers.

Retention

We keep Instagram data only while your account is connected. When you disconnect Instagram, delete your account, or remove Pixtale Growth from your Instagram settings, we delete your access token and cached Instagram data. Lookup results for public profiles are cached for up to 30 minutes.

Your rights

Under the UK GDPR and EU GDPR you can request access to, correction of, deletion of, or a copy of your personal data, and you can object to or restrict processing. Email arvind.vfx27@gmail.com. You can also complain to your data protection authority (in the UK, the ICO).

Deleting your data

See our Data Deletion instructions.

Children

Pixtale Growth is not intended for anyone under 16.

Changes

We’ll update this page if this policy changes and change the date above.