Privacy Policy

Who we are

followreport is operated by Eastside Development SRL, a company registered in Romania (CUI: 54238258). We provide an Instagram follower analysis tool that uses your official Instagram data export. Contact us at vlad.magurean1@gmail.com.

What data we collect

• Free users: Your ZIP file is processed entirely in your browser. No data leaves your device. We collect nothing.
• Registered users: We collect your email address and the list of Instagram usernames from your export (followers, following). We do not store the ZIP file itself.
• Pro subscribers: We additionally store Stripe payment data (managed by Stripe) and your subscription status.
• All visitors: Standard server logs (IP address, browser type, pages visited) may be collected by Vercel, our hosting provider.

Legal basis for processing (GDPR Article 6)

• Registered users and Pro subscribers: Processing is necessary for the performance of a contract (Article 6(1)(b)) — providing the follower tracking service you signed up for.
• Free users: Processing is based on our legitimate interest (Article 6(1)(f)) in providing the analysis service. No personal data is stored for free users as the analysis runs entirely in your browser.
• Transactional emails: Sent on the basis of contract performance (account verification, password reset, subscription receipts).

How we use your data

• To provide the follower tracking service (comparing snapshots over time)
• To send transactional emails (account verification, password reset)
• To process payments via Stripe
• We never sell your data to third parties
• We never use your data for advertising

Data storage and retention

Your data is stored in Google Firebase (Firestore), located in the EU. We retain up to 5 snapshots of your follower data per account. If you delete your account, all your data is permanently deleted within 30 days.

Third-party services

• Firebase (Google) — authentication and database storage
• Stripe — payment processing. Stripe stores your payment details; we never see your card number.
• Vercel — hosting and infrastructure

Your rights (GDPR)

As an EU resident, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format
• Object to processing of your data

To exercise any of these rights, email us at vlad.magurean1@gmail.com. We will respond within 30 days.

Cookies

We use only essential cookies required for authentication (Firebase Auth session token). We do not use tracking or advertising cookies.

Supervisory authority

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Romanian data protection authority: ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal) — www.dataprotection.ro.

Changes to this policy

We may update this policy occasionally. If we make significant changes, we will notify registered users by email. Continued use of the service after changes constitutes acceptance.