Privacy Policy

Who we are

Junibloom is an analytics and planning tool for Instagram creators, operated as an independent product from India. For anything in this policy, contact hello@junibloom.com.

What we collect

Email from the free calculator: if you ask our free rate calculator to email you your rate card, we store your address in our own database and use it only to email you about Junibloom: that card, one Instagram tip every two weeks, and major product updates, until you ask us to stop (every one of them carries a one-click unsubscribe). The numbers you typed are used to write that email and are not stored. We also note how you found us — a campaign tag if the link carried one, the page you arrived on, and the site that referred you (never the full address, which can identify a person). Addresses given to our earlier waiting list are kept and used the same way.

Visit analytics: we use Vercel's cookieless, privacy-friendly analytics to count page visits and a handful of coarse product moments (used the calculator, connected Instagram, opened checkout and whether it went through) — no cross-site tracking, no advertising identifiers, nothing that names you. Separately, when you're signed in, we keep which screens of the app you open and how long each one is on your screen, with your account, to see what helps creators and what we should fix. We never share it, and it's deleted with your account, and after 180 days.

Your account: the email address you sign in with; if you sign in with Google, the name and profile picture Google shares with us; the time zone your days are counted in; and anything you send us through the in-app feedback box (your message and the page you were on). When you sign in, we note the country and city your connection comes from, your device type, and the page and site that brought you (with any campaign tag on the link), to see where creators use the product and where sign-up gets stuck. We work these out from your connection and don't store your network address with them; our sign-in provider keeps the address of each signed-in session for security, and we use it for nothing else. If you rate Junibloom when the app asks, your stars, any note you add and when it asked (after 1, 3 or 6 hours of use) are kept with your account and deleted with it; that time is counted on your device and never sent to us.

Crash reports: if a screen breaks, your browser sends us a short report so we can fix it: the error and where in our code it happened, the page's address without anything after it, your browser and device type, whether your browser had translated the page or turned its text into links, and the app's version, linked to your account if you're signed in. It never carries what's on the page, and before it leaves your browser we remove any email, handle, code, long number or long quoted passage from it. If you delete your account, the reports it sent stay without your account attached.

Instagram data: when you connect an Instagram Creator or Business account, we access it through Instagram's official API with exactly two permissions, both for reading: basic account information (username, profile photo, follower count, media) and insights (reach, views, engagement, audience demographics). We store daily snapshots of these metrics to build your charts, content planner, and media kit — including your stories’ own metrics before Instagram expires them, and a sample of the comments on your posts (the text and its like count, to read what your audience responds to — never who wrote it). Instagram's links to your pictures expire, so we also keep a private copy of each post's picture, your profile photo and your story frames, to show them in the app and on your media kit.

Your content planner: what you add to it — ideas, hooks, scripts, captions, notes and brand deals, and the voice notes, pictures and clips you record or upload. Files are kept in private storage and open only through short-lived links made for you.

Junibloom AI: your chats with it (the questions you ask and its answers) are saved to your account so you can come back to them, and we keep a record of the credits each action used. We use them to improve Junibloom AI and its answers.

Brand proposals: when a brand sends a proposal from a creator's public media kit, we store what they write — the brand, their name if they give it, their email address, what they're asking for, their budget and timing, and their message — and show it only to that creator, so they can reply. We use it for nothing else, and the creator can delete it at any time.

Billing: payments, by card or UPI, are processed by Dodo Payments, our merchant of record, on its own checkout page; we send it your account email so the payment reaches your account. We keep a record of your plan, its status and renewal date, and each payment (what it was for, the amount, the date and any refund). We never see or store your card or UPI details.

Refer and earn: your referral link carries a random code, never your name or email. We count how often it is opened, and we keep which accounts were created through it and whether each one has paid, so we can add your rewards; you see those counts, never who. If you create an account through someone's link, we keep that it was theirs, and we never show them your name or email.

What we never do

We never ask for or see your Instagram password — connection happens on Instagram's own login page. Today we only read your account: we cannot post, comment, follow, message, or change anything on it. We do not scrape Instagram or use unofficial APIs. We do not sell your data to anyone.

How we use your data

To forecast where your following is headed, choose and explain the one change we suggest on your Growth tab, suggest ideas for your content planner and find the posts they became, answer the questions you ask Junibloom AI and check the reels you send it, use those chats to improve its answers, render your media kit, calculate rate estimates, add the rewards you earn by referring someone, see where creators use the product and where sign-up gets stuck, learn from the reason you give when you cancel (we keep it, if you give one), and send you product emails (your sign-in codes, a welcome note, up to five notes over four weeks while your Instagram isn't connected, a note when your first numbers are in, up to three notes after your free week of updates ends or after a trial ends without a plan, your weekly ideas on Sundays, a weekly digest when your kit gets views, a note when a brand sends you a proposal, a note on the third day of a trial when your account has news you haven't seen yet, like a post that beat your usual (never if you've opened the app in the last day), a reminder before a trial converts, a note if your plan's payment doesn't go through, one Instagram tip every two weeks, major updates). Besides the emails about your account and payments, never more than one a day or two in a week, each with a one-click unsubscribe, and a switch for each in Settings. We keep a record of which of these emails we sent you, when, and whether you opened the link in it (the link carries a random code, never your address), so we never send too many and can tell which ones help. That's it.

How the Growth tab uses AI

Once a day we check — in our own code, with no AI involved and at no cost to your data — whether anything that would change our advice has actually moved. Only when it has, and once a week before your weekly ideas are written, do we ask Claude to put the week into words. Claude never computes your numbers and never picks your move: our own code ranks what your data supports, and Claude writes the explanation around figures it is handed. It is also asked to group your posts by the topic you were writing about, so "your cooking posts travel further" can be said at all.

What we send is the same material named below. What comes back is stored as your brief and deleted after 90 days. You can see everything it was built from on the tab itself, and anything you tell us there — the goals you pick, a move you set aside, a test you start — is yours: we keep it as a record you can read and undo, never as a profile.

Where your data lives

Data is stored with Supabase (database, private file storage and authentication). Instagram access tokens are stored encrypted in a secrets vault, never in plain database columns. The app is hosted on Vercel, which also counts the visits described above. Email, your sign-in codes included, is delivered by Resend (your address and Instagram handle). To suggest ideas for your content planner, to write the weekly brief behind your Growth tab, to group your posts by the topic you were writing about, and to answer you in Junibloom AI, we send Anthropic's Claude API your stored metrics, post captions, the text of comments on your posts (never who wrote them), audience demographics, rate inputs, the questions you type, and — when you ask it to help with your planner — the idea, hook, script or caption you are working on. Never your login credentials, and Anthropic does not train on it. Each of these providers processes data only on our instructions.

When you attach pictures to a question or check a reel, the pictures, or up to twelve still frames read from your video on your own device, and any caption or script you add, are sent to Anthropic's Claude API to write the answer. The video file and its sound never leave your device. We do not keep the pictures or the stills: your chat keeps the answer and a note that something was attached.

Your public media kit

While your media kit is live, the numbers on it — your followers, the people you reached, your engagement, where your followers are, what a typical post delivers, your top posts and the brand collaborations you confirm — are visible at your public kit link, with the words you write there. Your rates are never on it. We count opens of your kit by the site they came from, never by who opened it; a link you label for a brand tells you that link was opened, not who opened it. You can make your kit private at any time from the Media kit tab.

Retention and deletion

Disconnect (Settings → Disconnect, or removing Junibloom in Instagram under Settings → Website permissions → Apps and websites) deletes, right away, everything we keep for that Instagram account: the access token and the connection; every stored snapshot and each post's numbers; the copies of your post pictures, profile photo and stories; your media kit and its views; your content planner for that account — ideas, hooks, scripts, captions, notes, brand deals, and the voice notes, pictures and clips you added; and your chats with Junibloom AI, Growth briefs and tests, past roadmaps and notifications for that account.

Disconnect keeps your login, any subscription, what your Brand deals paid, and the answers you gave on the Growth tab (your goals, what you won't make, the suggestions you turned down), so reconnecting does not ask you again. Your other connected accounts are not touched.

Delete account (Settings → Delete account) removes all of that for every account you connected, plus your Growth answers, your deal log, your referral link and the record of any referral you are part of, any subscription (cancelled first) and your login — immediately and permanently.

A data-deletion request sent through Meta deletes everything we hold for that Instagram account, the Growth answers included, for every Junibloom login that ever connected it — and you get a confirmation code. If we held nothing for it, the confirmation page says so.

If you cannot sign in, email hello@junibloom.com and we do it by hand within 30 days.

Cookies

We use only our own cookies, and only to run the service: the ones that keep you signed in, a short-lived one that secures the step where you connect Instagram, and a few that remember a setting for you (which of your connected accounts you are viewing, your time zone, and the theme a new sign-in opens in). If you open someone's referral link, one more holds that link's code, and only the code, for 30 days, so the person who shared it can be rewarded if you create an account. No third-party advertising trackers, and our visit analytics use no cookies.

Your rights

You can request a copy of your data, correct it, or delete it at any time by emailing us. We respond within 30 days.

Changes

If this policy changes in a way that matters, we'll email account holders before the change takes effect and update the date at the top of this page.