Privacy policy

1. Who is responsible

The controller of your data is Astratic Network S.L., tax ID B70867023, registered at Travessera de les Corts 346, 6º 1ª, 08029 Barcelona (Spain).

For any question about your data or to exercise your rights, write to us at support@astraticnetwork.com.

2. What data we process

From your account and your work in the workspace:

• Your name, your login email and your password, which is stored hashed and nobody can read.
• Your professional profile, such as your niche, city, bio, social accounts, rates and the figures you enter by hand.
• Your personal and shipping details (legal name, phone and address), so brands can send you their products.
• Your tax and payment details (tax status, tax ID, billing address and IBAN), for your contracts and invoices.
• What you create in the workspace, such as the brands and contacts in your CRM, proposals, collabs, briefs, content, scripts, notes, tasks, invoices, contracts and the files you upload.
• Technical access data (sessions, IP address and browser), to keep your account secure.

About people at brands:

• The business contact details you add to your CRM (name, role, email, phone and Instagram) and the messages from them that you paste.
• Those of anyone who reviews content, fills in a form or signs a contract through a link. For signatures we keep, as evidence, their name, email, date, IP address, browser and the signed text.

3. What we read from Instagram

Only if you connect it yourself, from Settings, Connections. It must be a professional account (creator or business). We use the official Instagram API and read the following:

• Your profile: account ID, username, account type, profile picture and the number of followers, follows and posts.
• Your account insights for the last 28 days: reach, views, accounts engaged, interactions (likes, comments, shares, saves and replies), profile visits, website and contact button taps, and follows and unfollows.
• Your followers' demographics by age, gender, country and city, as aggregated figures, exactly as Instagram provides them. Never data about individual followers.
• Your latest posts, with their type, link, caption, thumbnail and date, and each post's insights (reach, views, likes, comments, shares and saves, and for reels also the average watch time and skip rate).
• The access token Instagram issues, which we store encrypted.

We do not post or comment on your behalf, we do not read your messages and we do not see anything from other accounts. The data refreshes automatically once a week and whenever you press «Actualizar ahora» (Refresh now).

4. What we use it for

• To provide the workspace: your account, CRM, collabs, content, payments and everything else you use.
• To show you your Instagram insights and keep your profile, your media kit and your collab results up to date.
• For your audit. Astratic, as your agency, reviews your figures to advise you on what to improve and what rates to charge.
• To represent you with brands, under the network agreement. We show them your media kit and your figures when we put you forward for a campaign, and the results report of your collab with them.
• To write, on your behalf, to the brands you have worked with and propose that they work with you again.
• To send you service emails (the invitation, notifications and signing codes) and to meet our legal obligations, such as invoicing.

5. What we never do with your Instagram data

• We do not sell it or give it to anyone for advertising or profiling.
• Only you and the Astratic team that manages you can see it. A brand only receives your data, and only for a collaboration with you.
• We use it only as described in this policy and as Meta's terms allow.

6. Legal basis

• The contract with you (the network agreement and the terms of use), to provide the workspace and represent you.
• Your consent, to read your Instagram account. You can withdraw it at any time by disconnecting it.
• Legal obligation, for invoices and tax data.
• Legitimate interest, for the security of the workspace and to process the business contact details of people at brands when managing collaborations and proposing new ones. They can object at any time by writing to us.

7. Who we share it with

With brands, only your data and only for a collaboration with you, when you send it or Astratic sends it on your behalf.

With the providers that run the service, which process the data only on our behalf and under contract:

• Vercel, which hosts the application, with servers in Frankfurt.
• Neon, the database, also in Frankfurt.
• Cloudflare, where the files you upload are stored, in the European Union.
• Zoho, which sends the emails.

Some of them are US companies. When data leaves the European Economic Area, it does so with GDPR safeguards (the EU-US Data Privacy Framework or standard contractual clauses).

With no one else, unless a law or an authority requires it.

8. How long we keep it

• Your account and what you create, while you are in the network. If you leave or ask us to delete it, we delete it within 30 days at most, except what the law requires us to keep.
• Instagram data, while your account is connected. When you disconnect it, the access token, the insights history and the posts are deleted immediately. The latest figures on your profile card (followers, for example) stay as part of your profile, and you can change them or ask us to delete them.
• Invoices and tax data, for as long as the law requires (generally 6 years).
• Contract signatures, for as long as the contract can be claimed.

9. How to delete your Instagram data

• In the workspace, go to Settings, Connections and press «Desconectar Instagram» (Disconnect Instagram). It is deleted immediately.
• In Instagram, go to Settings, Apps and websites, and remove Astratic Network. If you also request there that we delete your data, Instagram notifies us, we delete everything immediately and you get a code to check it on the deletion page.
• Or write to us at support@astraticnetwork.com and we will delete it within one month at most.

10. Your rights

You can ask to access, correct, delete or port your data, restrict or object to its use, and withdraw your consent at any time. Write to us at support@astraticnetwork.com and we will reply within one month at most. You can also download your workspace data as a file from Settings.

If you believe we are not handling your data properly, you can file a complaint with the Spanish Data Protection Agency (aepd.es).

11. Security

The connection is encrypted (HTTPS). Passwords are stored hashed and Instagram access tokens encrypted. Files are private and open through links that expire. Each influencer can only see her own data.

12. Cookies

We only use the cookies needed to keep you signed in. We do not use advertising or analytics cookies. Some preferences, such as how a list is displayed, are stored in your browser.

13. Age

The workspace is only for people aged 18 or over.

14. Changes

If we change anything important in this policy, we will let you know in the workspace or by email before it applies.