Your data, protected.

Welcome to ReportIT ("Company", "we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services, including when you connect your Instagram account.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our services.

Information You Provide

• Account Information: Name, email address, phone number, and password when you register.
• Profile Data: Username, social media account identifiers (Instagram ID).
• Payment Information: Billing details processed securely through Stripe. We do not store full card numbers.
• Communications: Messages you send us via support or feedback forms.

Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, and interactions within the platform.
• Device Data: IP address, browser type, operating system, and device identifiers.
• Cookies and Tracking: We use session cookies for authentication and analytics cookies to improve our service.
• Comment and Content Data: Comments and direct messages from your connected social media accounts that are processed for toxicity analysis.

We use the information we collect for the following purposes:

• To create and manage your account and provide our moderation services.
• To analyse comment and message toxicity using AI and protect your community.
• To process payments and manage your subscription.
• To send you OTP verification codes and important service notifications via SMS or email.
• To improve, personalise, and expand our platform features.
• To detect, prevent, and address technical issues or fraudulent activity.
• To comply with legal obligations.

When you connect an Instagram account, you grant ReportIT permission to access specific data via Meta's official API (Meta Graph API) strictly to provide our moderation service. Specifically, we:

• Read comments, replies, and direct messages on content you own or manage, in order to detect toxic, abusive, or spam content.
• Hide, delete, or flag comments identified as harmful, acting only on your behalf and within the permissions you grant.
• Read basic profile metadata (name, ID, follower counts) to display your connected account in your dashboard.
• Do not post, message, or otherwise act as you outside of the moderation actions described above.
• Do not sell or use this platform data for advertising, and do not share it with any third party except as required to operate the service (see Section 5).

You can review and revoke ReportIT's access at any time from your platform account settings (Instagram: Settings → Apps and Websites), or by disconnecting the account from your ReportIT dashboard.

We do not sell, trade, or rent your personal information to third parties. We may share data with:

• Service Providers: Trusted partners such as Stripe (payments), Twilio (SMS), and Google (authentication) who assist in operating our platform under strict confidentiality.
• Meta Platforms: We access comment and message data via Meta's Graph API as authorised by you when you connect your account. We do not share your personal data with Meta beyond what is required for API access.
• Legal Requirements: We may disclose information if required by law, court order, or governmental authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred with prior notice.

We retain your personal data for as long as your account is active or as needed to provide you services. Specifically:

• Account data is kept for the duration of your subscription and for 30 days after account deletion.
• Comment and moderation data is retained for up to 12 months for audit and appeals purposes.
• OTP records are deleted immediately after successful verification or upon expiry (10 minutes).
• Payment records are retained for 7 years for legal and tax compliance.

You may request deletion of your ReportIT account and all associated data — including any data accessed via Instagram — at any time, using either method below:

• In-app: Go to Settings → Account → Delete Account from your ReportIT dashboard.
• By email: Send a deletion request to privacy@reportit.co.in from your registered email address, including the username or account you'd like removed.

We will process deletion requests within 30 days. This permanently removes your account information, connected platform tokens, and stored comment/moderation history from our systems, except where we are required to retain limited records for legal or tax purposes (see Section 6).

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for marketing or profiling purposes.
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@reportit.co.in.

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission via HTTPS/TLS.
• Bcrypt password hashing — we never store plain-text passwords.
• JWT-based authentication with short-lived tokens.
• Regular security reviews and access controls.

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

ReportIT is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal data, we will delete it immediately.

ReportIT connects to the platforms below on your behalf. Please also review each platform's own terms and privacy policy:

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a prominent notice on our platform. The "Last Updated" date at the top of this page will reflect the most recent revision.

If you have any questions or concerns about this Privacy Policy, please contact us: