This policy explains what information Capybara ("Capybara", "we", "us") collects, why we collect it, who we share it with, how long we keep it, and the choices you have.
Capybara is operated by Capybara Lab, legal entity name, registration number and address.
1. Who this policy covers
- Brands: businesses that create campaigns and fund paid collaborations.
- Creators: people who connect an Instagram professional account and accept paid collaborations.
- Visitors to our website and app, including people who request a demo.
2. Information we collect
Information you give us
- Account details: email address, display name, password, and whether you use Capybara as a brand or a creator. We store passwords only in a hashed form, never in plain text. We send a link to confirm your email address.
- Brand details: company name, website, logo or profile image, Instagram profile link, product names, product images and product page links, store links you import, and campaign details such as dates, budget, target audience and categories.
- Creator details: handle, bio, content categories, audience description, country, and the payout details you choose to provide. We do not store full bank account numbers or full card numbers.
- Demo requests: when you ask for a demo on our website, your name, work email, brand, budget range, store link and message.
Information from Instagram, with your permission
When a creator connects an Instagram professional account and grants permission, we receive:
- Profile information: account ID, username, name, account type, profile picture, follower count and number of posts.
- Recent posts: captions, media, thumbnails, links and dates of your recent posts. We use them so you can choose which post a collaboration is based on, and, when you ask, to suggest an audience description for your profile from your posts' captions.
- Post performance: the view count of posts that were published through Capybara, so we can calculate payment for that collaboration. We do not read insights for your other posts.
- An access token that lets Capybara act on your account only in the ways you approved. You can revoke it at any time (see section 7).
We only access Instagram data for the account you connect. We do not access data of your followers or of other users.
Content created through Capybara
When a creator accepts a collaboration, we prepare an edited version of the chosen post that features the brand's product. This edit is made with the help of AI-based image and video processing. We store the edited content and the link to the published post.
Payment information
Payments and payouts are handled by our payment processor. We do not store full card or bank account numbers. We keep limited records such as payment status, amounts, and the last four digits of the card a brand enters for a campaign.
Technical information
When you use Capybara we process technical information such as your IP address, and we record basic request details such as time and outcome. We use it to keep the service secure (for example, to limit repeated sign-ups or failed logins and to tell people from bots) and to fix problems.
3. How we use information
| Purpose | Information used |
|---|---|
| Create and secure your account | Account details, technical information |
| Show creators' profiles to brands and suggest relevant creators for a campaign | Creator details, Instagram profile information |
| Let a creator choose a post for a collaboration | Recent posts |
| Suggest an audience description for a creator's profile, when the creator asks | Captions of recent posts |
| Prepare the edited collaboration content | The chosen post, the brand's product details and images |
| Publish the collaboration post to the creator's own Instagram account | Edited content, caption, access token |
| Measure the published post's views and calculate payment | Post performance |
| Process campaign funding, refunds and creator payouts | Payment information, campaign and collaboration records |
| Send notifications and service emails, such as email confirmation and password reset | Account details, collaboration status |
| Answer demo requests | Demo request details |
| Prevent fraud and abuse, and comply with law | All of the above, as needed |
We do not sell your personal information. We do not use Instagram data for advertising, and we do not share it with data brokers.
4. Publishing on your behalf
Capybara publishes to a creator's Instagram account only for collaborations the creator has accepted. In their settings, creators choose whether an approved collaboration is published automatically once it is ready, or held so they can review it and then publish or discard it.
The caption of a collaboration post is based on the creator's original caption. It adds an advertising disclosure at the start (for example "#ad · Paid partnership with" the brand), a product link, the brand's Instagram handle and a credit line.
5. Who we share information with
We share information only as needed to run Capybara:
- Between brands and creators: brands see creators' public profile information, suggested matches and collaboration results. Creators see the brand's name, product and offer.
- Service providers who process data on our behalf and under our instructions: cloud hosting and database providers; AI image and video processing providers, which prepare the edited collaboration content; payment processors; email delivery providers; and security and bot-protection providers.
- Instagram (Meta), when we publish a post you approved or read its views.
- Authorities, when the law requires it, or to protect the rights and safety of our users and of Capybara.
- A buyer or successor, if Capybara is part of a merger or acquisition, under the same protections described here.
Confirm data-processing agreements are in place with each service provider category.
6. How long we keep information
- Account and profile data: while your account is active. When you delete your account, we delete it straight away.
- Instagram access tokens and Instagram data: until you disconnect Instagram, remove Capybara from Instagram, or delete your account.
- Post performance: only for the collaboration's tracking period, then kept as a total for payment records.
- Payment records: as long as tax and accounting law requires, in a form that no longer identifies a deleted account by name or email.
- Demo requests: number months, or until you ask us to delete them.
- Technical logs: number days.
7. Your choices and rights
- Download your data: in the app, open Settings, then Privacy & data, and choose Download.
- Delete your account: in the app, open Settings, then Privacy & data, and choose Delete account. See our Data Deletion page for what is deleted and what we must keep.
- Disconnect Instagram at any time from Settings, under Social accounts. This removes the stored access token. You can also remove Capybara in Instagram under Settings, then Apps and websites.
- Correct your information in Settings, or contact us at hello@capybarasocial.ai.
- Depending on where you live (for example, in Israel or the European Union), you may have additional rights, such as the right to object to or restrict processing and to complain to a data protection authority.
8. Security
We use measures designed to protect your information, including encrypted connections, hashed passwords, email confirmation, limits on login attempts and sign-ups, bot protection, and access controls. No method of transmission or storage is completely secure.
9. Children
Capybara is not intended for anyone under 18. We do not knowingly collect information from children.
10. International transfers
Our main servers and database are in the European Union (Germany), and our email provider processes email in the European Union. Some service providers, such as AI processing and payment providers, may process information in other countries, including the United States. Confirm the transfer safeguards used, for example Standard Contractual Clauses.
11. Changes
If we change this policy, we will update the date at the top. If the changes are significant, we will tell you in the app or by email.
12. Contact
Capybara Lab, legal entity name and address
Email: hello@capybarasocial.ai
See also our Terms of Use.
