Privacy Policy

Last updated: 10 July 2026

Welcome to Snytch.

Snytch is an online service accessible through snytch.co that lets users analyze and monitor publicly available Instagram account activity, including follows, unfollows, and other visible interaction signals.

Protecting your personal data matters to us. This Privacy Policy explains how we collect, use, store, and protect information when you access or use the Website and Services. Questions? Contact us at [email protected].

Snytch handles personal data responsibly and does not sell personal data to third parties.

1. Definitions

"User": any individual accessing or using the Website or Services.
"Website": the Snytch platform at snytch.co.
"Service": all tools, analyses, alerts, reports, and features provided by Snytch.
"Public Instagram Data": information publicly accessible on Instagram without requiring private access, authentication, or unauthorized means.
"Personal Data": any information relating to an identified or identifiable natural person, where applicable under relevant data protection laws.

2. Data we collect

Snytch follows a minimal data collection approach and only processes what is necessary to provide and maintain the Service.

2.1 Information you provide

Account email address (collected at sign-up).
Instagram usernames you submit for analysis ("target accounts").
Messages, group names, and content you create inside the Service.
Support messages you send us.
Account or billing-related information where applicable.

2.2 Public Instagram Data

When you enter an Instagram username, Snytch may process:

the username provided;
publicly visible follow and unfollow activity;
other publicly visible interaction signals associated with that account;
metadata or patterns derived from publicly accessible information.

Snytch does not collect or access: private Instagram account data, passwords or login credentials, direct messages, private media or restricted content, or any non-public account information.

2.3 Technical and device data

Automatically collected when you access the Website: IP address, browser type and version, device type, operating system, access timestamps, pages visited and interactions, crash reports and error logs, and general diagnostic and performance data. This helps us operate, secure, and improve the Service.

2.4 Payment data

If you buy a subscription, payments are processed by third-party providers such as Whop. Snytch does not store or directly process full card numbers, security codes, or full banking credentials. Payment providers handle billing in line with their own privacy policies.

3. How we use data

We use information only for legitimate and necessary purposes:

provide the Service and generate analyses, alerts, reports, and outputs;
process Instagram usernames submitted for analysis;
create and manage your account;
maintain, secure, and improve the Website and Services;
monitor usage and prevent fraud, abuse, misuse, or technical disruption;
troubleshoot errors and maintain stability;
process subscriptions and billing;
respond to support requests;
comply with legal obligations.

We do not sell, rent, or trade personal data.

4. Legal basis for processing

Where applicable under relevant data protection laws, we process personal data on one or more of these bases:

performance of a contract: to provide the Service you request;
legitimate interests: such as maintaining, securing, and improving the Service;
compliance with legal obligations;
consent, where required by law.

Where we rely on legitimate interests, we do so only where they are not overridden by your applicable rights and freedoms.

5. Public data processing

Snytch processes publicly available Instagram data only, and is designed to operate solely on information publicly accessible on Instagram at the time of analysis. We do not attempt to access, collect, or bypass access restrictions relating to private accounts, private messages, hidden or restricted content, or protected systems. If a target account becomes private, restricted, or unavailable, the Service may no longer function for that account.

6. Data sharing

Snytch does not sell personal data and does not share it for advertising or commercial resale. Information may be shared only with trusted providers where necessary to operate the platform: hosting and infrastructure, payment processors, analytics or performance monitoring, fraud/security providers, and technical maintenance. Providers receive only what is reasonably necessary for their role.

As of 12 August 2026, these providers are: Hostinger International Limited (server hosting, located in Indonesia); Cloudflare (content delivery and security); Resend (email delivery, European Union sending region); Whop (payments); PostHog (product analytics and session replay, screen recordings of app usage, with text and images masked; European Union hosting); HikerAPI (collection of public Instagram data). We update this list when it changes.

We may also disclose information to comply with law, respond to legal requests or court orders, protect our rights or the safety of users or others, or investigate fraud, abuse, or security incidents. We may also disclose data as part of a merger, acquisition, or sale of assets, subject to this policy.

7. Data retention

We retain personal data only as long as reasonably necessary for the purposes above. Typical periods:

submitted Instagram usernames: retained temporarily as needed to generate or support reports and history;
technical logs and diagnostics: up to 12 months, unless a longer period is needed for security or legal reasons;
support communications: as long as needed to resolve the issue;
payment records: retained by payment processors per their legal and financial obligations.

Where data is no longer needed, we may delete, anonymize, or securely aggregate it. You may request deletion at any time by contacting us.

8. Data security

We use reasonable technical and organizational measures to protect information against unauthorized access, disclosure, misuse, alteration, or destruction, including HTTPS encrypted communications, restricted administrative access, infrastructure monitoring, authentication and access controls, regular security updates, and abuse-detection logging. No online system or transmission method can be guaranteed completely secure.

9. Cookies and similar technologies

The public pages of snytch.co set no cookie. They store only two things, and only when you act: the language you pick, and the @ you type before signing up, both in your browser's local storage, on our own domain, so that the feature you just asked for works. Analytics on these pages run without any persistent storage.

From the sign-up screen onwards, and inside the app, we use an analytics cookie and local storage entries (PostHog, EU-hosted) to measure how the product is used. You can control or disable cookies in your browser settings; disabling some may affect how the app works.

10. Analytics and performance monitoring

Snytch may use limited analytics or diagnostic tools to understand Website usage and improve reliability and performance (traffic volume, feature usage, performance issues, technical errors, general user flow). We seek to use such tools in a proportionate, privacy-conscious way.

11. International data transfers

The server hosting the Service's database is located in Indonesia, with Hostinger International Limited. Indonesia is not covered by a European Commission adequacy decision. These transfers rely on our providers' contractual commitments, including the standard contractual clauses where their data processing agreement provides for them. Other providers are established in the United States (Cloudflare, Whop, Resend); product analytics data is hosted in the European Union (PostHog). You can request details of these safeguards by writing to [email protected].

12. Your rights

Depending on your location and the laws that apply, you may have the right to: access your personal data; request correction of inaccurate information; request deletion; request restriction of certain processing; object to certain processing; request a portable copy where applicable; and withdraw consent where processing is based on consent.

To exercise any right, contact [email protected]. We may need to verify your identity first, and will respond within the timeframe required by applicable law (generally 45 days).

If you are in the European Union or the United Kingdom, you also have the right to lodge a complaint with your data-protection supervisory authority (in France, the CNIL, cnil.fr).

13. Children's privacy

Snytch is not intended for children under the age of 13, and we do not knowingly collect personal data from them. If we learn that data from a child under 13 has been collected in violation of applicable law, we will take reasonable steps to delete it promptly. If you believe a child provided us data, contact [email protected].

14. Third-party platforms

Snytch relies on publicly available information from Instagram. Snytch is an independent service and is not affiliated with, endorsed by, or associated with Instagram or Meta Platforms, Inc. Changes by Instagram or Meta may affect the availability, accuracy, or operation of the Service. This policy applies only to Snytch and does not govern Instagram, Whop, or any other third party, review their policies where relevant.

15. Content and platform disclaimer

Snytch does not host, upload, or claim ownership over Instagram content belonging to third parties. The Service does not reproduce private platform content and only processes publicly accessible signals for analytical purposes. All third-party content remains the property of its respective owners. If a rights holder, platform representative, or other concerned party believes the Service raises a legitimate concern, they may contact us at [email protected], and we will review and respond where appropriate.

16. Changes to this Privacy Policy

We may update this policy from time to time. The latest version will always be available on the Website. Material changes may be reflected through an updated date or other notice. Continued use after changes take effect constitutes acceptance of the revised policy.

17. Governing law

This Privacy Policy is governed by and interpreted under the laws of the Republic of Indonesia. If you are in the European Union, the GDPR applies to the processing described here and nothing in this policy limits the rights it grants you.

18. Contact

Questions about this policy or your data: [email protected].

The data controller is PT. LTVT Capital Group: Jalan Pantai Batu Mejan No. 33A, RT. 000, Canggu, Kuta Utara, Kabupaten Badung, Bali, Indonesia.