Privacy policy

• Your Instagram username, display name, profile picture, account type and account id, as Instagram provides them at login.
• The access token Instagram issues for your account. It is encrypted at rest and used only to list your Reels and fetch their media for transcription. We never post, comment, message or follow on your behalf.
• For each Reel: its id, link, caption, posting date, duration, and a copy of its thumbnail image.
• A text transcript of what is spoken in each Reel, split into short passages; a machine-written summary and topic list for each passage; and the search indexes built from them.
• Your login sessions and any API keys you create. Both are stored as one-way hashes.

We do not keep or play back your videos. Media is fetched only for as long as transcription takes, then discarded.

• The text you searched, which videos were returned, which one you tapped, and how long the search took.
• Standard request information that any web server receives, such as your IP address and browser type. We use it to run the site, to stop abuse, and for rate limits. We do not use it to identify you.

Viewers have no account with us and we set no tracking cookies. Tapping a result takes you to Instagram, whose own privacy policy applies there.

The hashed key you call with, the creator you searched, the query, the results, and the time of each call. The creator whose key it is can see how often it was used.

• To make a creator's Reels searchable by what was said in them, and to send viewers to the right post on Instagram.
• To show creators how their page is used: searches, clicks, speed, and which searches found nothing.
• To keep the service working and secure, including rate limits and abuse prevention.
• To improve search quality by measuring how well queries find the right video.

We do not sell, rent or license any of this data, do not use it for advertising, and do not use Instagram data for anything beyond the service described here.

We use a small number of service providers who process data on our behalf and under our instructions:

• Hosting and delivery: Vercel.
• Database and thumbnail storage: Supabase.
• Speech-to-text: the transcription provider receives the audio of each Reel and returns text. Currently AssemblyAI.
• Search models: passages of transcript are sent to an embeddings provider (Voyage AI) and a language-model provider (Anthropic) to build summaries and search indexes.
• Instagram (Meta), which provides the data described above when a creator logs in, under Meta's Platform Terms.
• Payments: Stripe. When a creator subscribes, Stripe collects the card and billing details on its own pages; we never receive the card number. We keep Stripe's customer and subscription identifiers, the subscription status and its renewal date.

No provider receives your Instagram access token. We may change providers; this page will be updated when that happens.

• Creator data, transcripts and indexes: until you delete your account or disconnect WhichVid from Instagram, whichever comes first.
• Search records: kept so creators can see how their page is used. They contain no viewer identity.
• Login sessions: 30 days, or until you log out.
• Access tokens: refreshed on a schedule and deleted with the account.

Any of these deletes your profile, your Instagram connection and token, every transcript and index built from your posts, your sessions and your API keys, immediately:

• Remove WhichVid in Instagram's settings under Apps and Websites. Instagram tells us and we delete. A confirmation is shown at /data-deletion.
• Ask us directly using the contact below. We delete and confirm.

Contact: message @whichvid.io on Instagram.

Wherever you are, you can ask what we hold about you, ask for it to be corrected or deleted, and object to how we use it. Residents of California, the European Economic Area, the United Kingdom and other places with privacy laws have these rights in law; we extend them to everyone. Use the contact above. We do not sell or share personal information for advertising, so there is nothing to opt out of.

WhichVid is for Instagram professional accounts, which require users to be at least 18 in most places. We do not knowingly collect data from children under 13, and will delete it if we learn we have.

When this page changes, the date at the top changes. Material changes will also be noted on the creator dashboard.