Data & Privacy

This page explains the data boundaries of GramScraper. For the full notice covering website visitors, customers and people represented in public Instagram data, see the Privacy Policy.

What the product is

GramScraper provides API access to public Instagram profile and content information for content analytics, creator research, social listening and related research. It is not an outreach platform, contact database, lead list or private-data access service.

Sources and scope

Results are requested through an authorized third-party public-data API which provides information corresponding to public Instagram surfaces. Customers select a public username, public content URL, hashtag or location-related query. Data availability can change at the source. GramScraper is not affiliated with or endorsed by Instagram or Meta.

Possible output includes public usernames, display names, biographies, profile images, public profile and content identifiers, captions, media, comments, timestamps, hashtags, public location labels, follower/following counts and engagement metrics.

Important exclusions

• No access to private accounts or access-control bypass.
• No structured creator email, phone, WhatsApp or contact-enrichment fields.
• No follower, following or liker lists, user-search lists, or downloadable audience lists.
• No built-in email campaign, direct-message or outreach tooling.

Customer account emails are different: they are supplied by the customer and used for authentication, security, support and service administration. They are not creator contact data and are not included in Instagram API results.

Processing and storage

Public Instagram results are returned to the requesting customer. GramScraper also records operational request data such as the customer/account identifier, endpoint, query term, timestamp, response status, response time, credit use, IP address and user agent. Recent search terms may be saved in the customer’s browser and account search history. Service providers necessarily process data to host the service, authenticate accounts, retrieve public results and measure product use.

GramScraper does not promise that public source information is complete, current or accurate. Customers must verify information before relying on it and must not use it for consequential decisions about a person.

Service providers

GramScraper uses service providers at the level needed to operate the product, including Railway for cloud hosting, Supabase for authentication and database services, an authorized third-party API for delivery of public Instagram data, and PostHog for product analytics. Google supports optional sign-in. The payment processor identified at checkout handles payment details when purchases are enabled; GramScraper does not intend to store full card details.

Retention, cache, refresh and deletion

GramScraper does not currently keep a separate application-level cache or standalone database of public Instagram API responses. Each new request asks the authorized upstream API for the then-available public information. Restricted infrastructure logs may contain query details or short response previews for troubleshooting.

Account, credit and transaction records remain while an account is active and afterward while needed for security, disputes and applicable recordkeeping. Search history remains until the customer clears it or requests deletion. Request and infrastructure logs currently have no fixed automatic deletion period; they remain while reasonably needed for service operation, abuse prevention, support and usage accounting. Browser-stored recent searches can be cleared through the product or browser storage controls.

Deleting information held by GramScraper does not delete the original from Instagram or an independent upstream provider. If public source data changes or is removed, a later request should reflect what the upstream API then provides, but upstream refresh timing is outside GramScraper's control.

Rights and profile-data requests

A customer, Instagram user, creator or other affected person may opt out or request access, correction, deletion/removal, restriction or objection concerning information GramScraper holds by emailing [email protected]. Include the relevant Instagram profile or content URL, the information concerned and the specific request. We may request reasonable information to verify identity or authority and will respond based on the request, our role and applicable requirements.

Do not email identity documents unless we specifically request them through an appropriate method. A request does not automatically require removal where retention or processing is permitted or required, but each request will be reviewed.

Responsible use and abuse reports

Customers must follow the Acceptable Use Policy. To report scraping abuse, harassment, prohibited list-building or other misuse, email [email protected].