Privacy policy

1. Information we collect

From you, the creator

• An Instagram URL, @handle, or username you paste in, used to read that profile’s public information.
• Your email address, required so we can send you the finished survey link and grant you Editor access on the underlying Google Form.
• Your own typed answers — audience description, niche, and bio, if you choose “Describe my audience manually” instead of an automatic read — and any edits you make to the drafted survey questions before publishing.
• An Instagram/Facebook connection, only if you explicitly click “Connect Instagram for deeper insights.” This is optional and never happens automatically.

From a public Instagram profile

When you paste a profile URL or username, we read only: username, display name, biography, business/creator category, follower and following counts, total post count, external website, and up to twelve recent post captions together with their public like and comment counts. When Instagram hides likes or comments on a post, we record that as unavailable, never as zero — every average or engagement figure we compute is a public estimate from what is actually visible, not private Instagram Insights. We never read private messages, contact details, exact location, profile pictures, media files, or any account you have not submitted.

Survey responses (only when you ask)

Responses your followers submit go directly into the Google Form and stay there by default — we never read, store, or see them automatically. If you click “Analyze my results,” we fetch that form’s current questions and responses at that moment, generate a report, and do not retain the raw responses afterward. This only ever happens when you explicitly trigger it; there is no polling and no scheduled or automatic analysis.

If you open Audience Intelligence inside Whop

When the tool is opened as an experience embedded in Whop, Whop attaches a short-lived, signed token identifying you to that request. We verify that token and use the Whop user id it contains for exactly one purpose: checking, on each page load, whether your Whop account has access to that experience (i.e., whether you have joined the relevant product). We do not read your Whop profile, payment history, messages, or any other Whop data, and the verified user id is not linked to your survey data or stored beyond the request that checks access.

2. How we use this information

• Identify your niche and audience from the evidence collected above.
• Generate the ten creator questions and the draft survey questions.
• Create and publish the Google Form, and share you Editor access to it by email.
• Send you the survey link.
• Generate the response-analysis report, only when you explicitly request it.
• Verify your Whop membership so the embedded experience can be shown only to people who have access to it.
• Detect abuse and apply rate limits on the endpoints above.

We do not use any of this information for advertising, and we do not build profiles of individuals across creators or sessions.

3. Google User Data

Audience Intelligence accesses the Google Forms API and Google Drive API under a single Google account that the operator of this tool controls — not your own. You never sign into Google through this app; there is no Google login button anywhere in the product.

The scopes requested on that operator account are:

• drive.file — access limited to files this app itself creates. It is used to create your survey’s Google Form, populate it with the approved questions, publish it, and share Editor permission on that one file to the email address you provided. This scope grants no access to anything else in the operator’s Drive.
• forms.responses.readonly — used exclusively when you click “Analyze my results.” It is never used automatically, on a schedule, or for any form you have not published through this tool.

What we do with data obtained through these Google APIs: form metadata and questions are used only to build and publish your survey; response data (question text and answers) is used only to generate the report described above, at the moment you request it, and is not persisted after that report is produced. This data is never sold, never used for advertising or advertising measurement, never used to train generalized/blanket AI or machine-learning models, and is not transferred to any party except the sub-processors listed in Section 4, each strictly to perform the step described there.

Storage: we do not copy Google Forms data into a database of our own. Response data obtained via forms.responses.readonly exists only in server memory for the duration of generating one report and is discarded immediately after.

4. Who else processes this information

We rely on a small number of service providers (sub-processors), each for one specific step, and only the data each one needs to do that step:

• Apify — runs the public-profile read on our behalf, given only the username you submitted.
• Anthropic — processes the collected profile information and, when requested, survey responses, to generate the niche analysis, survey questions, and response-analysis report. Your email address is never sent to Anthropic.
• Google — hosts the Google Form under the operator’s account, as described in Section 3.
• Resend — delivers the one email containing your survey link.
• Whop — issues and signs the identity token used to verify your membership when the tool is opened inside Whop, as described in Section 1.
• Meta (Facebook/Instagram) — only if you use the optional “deeper insights” connection, to read the Instagram Business/Creator account you explicitly authorize.

We do not sell information to anyone, we do not run advertising or third-party tracking on this site, and we do not share information with any party beyond this list except where required by law.

5. Storage, retention, and deletion

We do not operate a database. In-progress answers and the generated survey are kept only in your own browser’s local storage, so you can resume after a refresh — nothing is copied to a server-side store. An optional Instagram or Whop connection is verified per request from a short-lived, encrypted token; it is not stored server-side beyond that request. Emails sent through Resend are retained by Resend under its own policy, solely for delivery and delivery troubleshooting.

To request that we stop processing something on our end, or ask what we hold about you, contact us using the details in Section 8. Because most of your data never leaves your own browser, clearing your browser’s local storage for this site deletes your in-progress survey draft immediately. Your published survey and its responses live in Google Forms, under the operator’s account with you holding Editor access — you can delete or export that form at any time from within Google Forms.

6. Security

• Every third-party API key (Anthropic, Apify, Google, Resend, Whop, Meta) is server-only and never sent to the browser.
• An optional Instagram/Meta connection is held only in an encrypted, httpOnly session cookie, never exposed to page scripts. A Whop identity token is verified fresh on every request and is never stored in a cookie or database at all.
• Every state-changing request checks its origin and is rate-limited.
• A Whop membership check is re-verified against Whop’s own signed token on every request; access is never trusted from client-side state alone.

7. Your choices and rights

You can skip the automatic Instagram read entirely and describe your audience manually. You can disconnect an optional Instagram/Meta connection at any time in your own Meta account settings, and leave a Whop product at any time in Whop. Depending on where you live, you may have rights to access, correct, or delete personal information we hold, or to object to certain processing — contact us using the details below and we will respond.

8. Contact and deletion requests

Questions about this policy, your information, or requests to delete data we hold: reach the operator at the support email listed on this app’s Google OAuth consent screen and Whop app listing.

9. Children

This tool is intended for creators running their own account or business, not children. It is not directed at, and should not be used by, anyone under 16.

10. Changes to this policy

If this policy changes in a way that matters, the “last updated” date at the top of this page will change too.