Privacy Policy

Last updated: August 10, 2026

This Privacy Policy describes how InStories collects, uses, shares and protects personal data when operating the Chrome extension and the instories.shop website, in compliance with Brazil's General Data Protection Law (LGPD) and, for users in the European Union, the GDPR.

1. Who we are

InStories, operated by [Company name and registration number to be added], is the controller of the personal data processed through the extension and the site described in this policy. For any request related to your data, contact us at suporte@instories.shop.

2. What data we collect

We collect: (i) account data, such as email and password (stored encrypted); (ii) license usage data, such as your plan, consumed limits and renewal dates; (iii) a device identifier, used to prevent abuse and fraud (for example, creating multiple free accounts); (iv) payment data processed directly by our providers (Stripe, PayPal), without InStories storing your full card number. We never collect or store your Instagram account password.

3. How we collect this data

Data is collected when you create an account, use extension features, subscribe to a paid plan, or contact support. The instories.shop website uses browser local storage only to remember your chosen language; the extension uses Chrome's local storage to keep your preferences and license state.

4. What we use this data for

We use the data we collect to: authenticate your account and keep your session active; enforce your plan's usage limits; process payments and renewals; prevent fraud and abuse of the free plan; send essential account communications (like signup confirmation and billing notices); and provide support when requested.

5. Who we share your data with

We only share data with service providers necessary to run InStories: Supabase (database and authentication), Stripe and PayPal (card and digital wallet payment processing), Resend (transactional email), Cloudflare R2 (storage for your saved templates), and Giphy and Deezer (GIF and music search inside the editor, accessed through our server). We do not sell your personal data to third parties.

6. Cookies and local storage

The instories.shop website uses browser local storage only to remember your language preference — we do not use tracking or third-party advertising cookies. The extension uses Chrome's local storage to function (storing preferences and license state), kept within your own browser.

7. How long we keep your data

We keep your data for as long as your account is active. If you request account closure, we delete or anonymize personal data within a reasonable period, except information we're legally or tax-required to retain (such as payment records).

8. Security

We apply technical and organizational measures to protect your data, including password encryption and HTTPS communication. No system is 100% secure; should we identify an incident affecting your data, we will notify you as required by applicable law.

9. Your rights

You may request, at any time: access to your personal data; correction of incomplete or outdated data; deletion of your account and associated data; portability of your data; and information about who we share your data with. To exercise these rights, contact suporte@instories.shop.

10. International data transfers

Some of our service providers (such as Supabase, Stripe, PayPal, Cloudflare, Giphy and Deezer) operate servers outside Brazil. In these cases, we require those partners to adopt data-protection standards compatible with applicable law.

11. Children's privacy

InStories is not directed at anyone under 18, and we do not knowingly collect data from children or teenagers. If we become aware that we've collected a minor's data without proper consent, we will delete it.

12. Changes to this policy

We may update this Privacy Policy periodically. Material changes will be communicated through the site or by email. The last-updated date is shown at the top of this page.

13. Contact

Questions about this Privacy Policy or requests related to your personal data can be sent to suporte@instories.shop.