Capybara
Privacy Terms Data deletion
Log in Request a demo
Legal

Privacy Policy

What we collect, why we collect it, who we share it with, how long we keep it, and the choices you have.

Last updated: November 14, 2026

Privacy Policy Terms of Use Data deletion
On this page 1. Who this covers 2. What we collect 3. How we use it 4. Publishing for you 5. Who we share with 6. How long we keep it 7. Your choices 8. Security 9. Children 10. International transfers 11. Changes 12. Contact
✏️
Draft under legal review. Items highlighted in yellow are still being finalised.

This policy explains what information Capybara ("Capybara", "we", "us") collects, why we collect it, who we share it with, how long we keep it, and the choices you have.

Capybara is operated by Capybara Lab, legal entity name, registration number and address.

1. Who this policy covers

  • Brands: businesses that create campaigns and fund paid collaborations.
  • Creators: people who connect an Instagram professional account and accept paid collaborations.
  • Visitors to our website and app, including people who request a demo.

2. Information we collect

Information you give us

  • Account details: email address, display name, password, and whether you use Capybara as a brand or a creator. We store passwords only in a hashed form, never in plain text. We send a link to confirm your email address.
  • Brand details: company name, website, logo or profile image, Instagram profile link, product names, product images and product page links, store links you import, and campaign details such as dates, budget, target audience and categories.
  • Creator details: handle, bio, content categories, audience description, country, and the payout details you choose to provide. We do not store full bank account numbers or full card numbers.
  • Demo requests: when you ask for a demo on our website, your name, work email, brand, budget range, store link and message.

Information from Instagram, with your permission

When a creator connects an Instagram professional account and grants permission, we receive:

  • Profile information: account ID, username, name, account type, profile picture, follower count and number of posts.
  • Recent posts: captions, media, thumbnails, links and dates of your recent posts. We use them so you can choose which post a collaboration is based on, and, when you ask, to suggest an audience description for your profile from your posts' captions.
  • Post performance: the view count of posts that were published through Capybara, so we can calculate payment for that collaboration. We do not read insights for your other posts.
  • An access token that lets Capybara act on your account only in the ways you approved. You can revoke it at any time (see section 7).

We only access Instagram data for the account you connect. We do not access data of your followers or of other users.

Content created through Capybara

When a creator accepts a collaboration, we prepare an edited version of the chosen post that features the brand's product. This edit is made with the help of AI-based image and video processing. We store the edited content and the link to the published post.

Payment information

Payments and payouts are handled by our payment processor. We do not store full card or bank account numbers. We keep limited records such as payment status, amounts, and the last four digits of the card a brand enters for a campaign.

Technical information

When you use Capybara we process technical information such as your IP address, and we record basic request details such as time and outcome. We use it to keep the service secure (for example, to limit repeated sign-ups or failed logins and to tell people from bots) and to fix problems.

3. How we use information

PurposeInformation used
Create and secure your accountAccount details, technical information
Show creators' profiles to brands and suggest relevant creators for a campaignCreator details, Instagram profile information
Let a creator choose a post for a collaborationRecent posts
Suggest an audience description for a creator's profile, when the creator asksCaptions of recent posts
Prepare the edited collaboration contentThe chosen post, the brand's product details and images
Publish the collaboration post to the creator's own Instagram accountEdited content, caption, access token
Measure the published post's views and calculate paymentPost performance
Process campaign funding, refunds and creator payoutsPayment information, campaign and collaboration records
Send notifications and service emails, such as email confirmation and password resetAccount details, collaboration status
Answer demo requestsDemo request details
Prevent fraud and abuse, and comply with lawAll of the above, as needed

We do not sell your personal information. We do not use Instagram data for advertising, and we do not share it with data brokers.

4. Publishing on your behalf

Capybara publishes to a creator's Instagram account only for collaborations the creator has accepted. In their settings, creators choose whether an approved collaboration is published automatically once it is ready, or held so they can review it and then publish or discard it.

The caption of a collaboration post is based on the creator's original caption. It adds an advertising disclosure at the start (for example "#ad · Paid partnership with" the brand), a product link, the brand's Instagram handle and a credit line.

5. Who we share information with

We share information only as needed to run Capybara:

  • Between brands and creators: brands see creators' public profile information, suggested matches and collaboration results. Creators see the brand's name, product and offer.
  • Service providers who process data on our behalf and under our instructions: cloud hosting and database providers; AI image and video processing providers, which prepare the edited collaboration content; payment processors; email delivery providers; and security and bot-protection providers.
  • Instagram (Meta), when we publish a post you approved or read its views.
  • Authorities, when the law requires it, or to protect the rights and safety of our users and of Capybara.
  • A buyer or successor, if Capybara is part of a merger or acquisition, under the same protections described here.

Confirm data-processing agreements are in place with each service provider category.

6. How long we keep information

  • Account and profile data: while your account is active. When you delete your account, we delete it straight away.
  • Instagram access tokens and Instagram data: until you disconnect Instagram, remove Capybara from Instagram, or delete your account.
  • Post performance: only for the collaboration's tracking period, then kept as a total for payment records.
  • Payment records: as long as tax and accounting law requires, in a form that no longer identifies a deleted account by name or email.
  • Demo requests: number months, or until you ask us to delete them.
  • Technical logs: number days.

7. Your choices and rights

  • Download your data: in the app, open Settings, then Privacy & data, and choose Download.
  • Delete your account: in the app, open Settings, then Privacy & data, and choose Delete account. See our Data Deletion page for what is deleted and what we must keep.
  • Disconnect Instagram at any time from Settings, under Social accounts. This removes the stored access token. You can also remove Capybara in Instagram under Settings, then Apps and websites.
  • Correct your information in Settings, or contact us at hello@capybarasocial.ai.
  • Depending on where you live (for example, in Israel or the European Union), you may have additional rights, such as the right to object to or restrict processing and to complain to a data protection authority.

8. Security

We use measures designed to protect your information, including encrypted connections, hashed passwords, email confirmation, limits on login attempts and sign-ups, bot protection, and access controls. No method of transmission or storage is completely secure.

9. Children

Capybara is not intended for anyone under 18. We do not knowingly collect information from children.

10. International transfers

Our main servers and database are in the European Union (Germany), and our email provider processes email in the European Union. Some service providers, such as AI processing and payment providers, may process information in other countries, including the United States. Confirm the transfer safeguards used, for example Standard Contractual Clauses.

11. Changes

If we change this policy, we will update the date at the top. If the changes are significant, we will tell you in the app or by email.

12. Contact

Capybara Lab, legal entity name and address
Email: hello@capybarasocial.ai

See also our Terms of Use.

CapybaraThe social marketplace for fashion.
HomePrivacyTermsData deletionContactLog in

© 2026 Capybara Lab. All rights reserved.