Privacy Policy

1. What we collect from you

We deliberately collect as little as possible. From you, we store:

• your email address — to send you the payment receipt and, for orders placed on the site, the link to your report and order emails, and to handle refund requests;
• your Telegram username — optional, only if you enter it at checkout on the site, so we can message you if an order email doesn't arrive;
• the username or topic you asked about, together with the resulting report;
• order and payment details — the product, amount, payment method, payment ID, status and dates. Card details never reach us;
• your Telegram chat ID and interface language — only if you use our Telegram bot @sledinstbot (the Bot), so we can send the report and order updates to that chat in your language. We do not ask for your name, phone number or any other details of your Telegram account.
• your Telegram user ID — only if you pay in Telegram Stars, on the site or in the Bot. Telegram sends it to us together with the payment ID, and a Stars payment cannot be refunded without it.
• technical data — IP address, browser details, the requested page and referrer, and hashed IP address and Telegram chat ID, to protect the site and the Bot from automated requests, keep them running and count visits.

Your email address and Yandex Metrica ID are recorded in a database on a server in the Russian Federation (Selectel, Moscow). For orders placed on the site, a copy is also kept by Cloudflare, Inc., which also stores reports, order records and service data. The Telegram username you give at checkout is kept only in that database in Russia, next to your email address. It leaves the database only to Telegram: in a notice to us when an order email could not be delivered (the notice passes through the back end of the site and is not stored there), and when we message you. Such a notice stays in our Telegram until we delete it; if you ask us to delete your data (section 7), we delete it too. The email address, the Telegram username and the Metrica ID are kept for 12 months after payment, or 30 days for an unpaid order, and then deleted automatically. The chat ID, language and the state of your conversation with the Bot are kept for 180 days after your last interaction with the Bot and then deleted automatically. The Telegram user ID of a Stars payment is kept for 180 days after the payment and then deleted automatically; if a refund of that payment is still in progress, it is kept until the refund is done.

We never ask for and never receive your Instagram credentials. There is no account to create, no password to set, and no browser extension to install.

2. Data about third parties

Depending on the product, a report or a monitoring history can contain public usernames and account IDs, display names and profile images, profile bios, following or follower lists, public posts and captions, public likes and comments, hashtags, currently active public stories, the country, city, creation date and former usernames of an account where Instagram shows them publicly, and metrics calculated from this data. This information is exposed by the public Instagram profile without your login. We do not combine it with private databases or claim access to private messages.

A one-time report is stored for 7 days from the order and then deleted automatically. For a monitoring product, the baseline list and change history are stored for the paid 30-day period and then deleted. Instagram account numbers from the lists of a checked profile (no names, photos or other data) are kept for 90 days from the latest check of that profile, so that later checks show the lists in the same order, and are then deleted automatically. Order and payment records are kept for the period required by tax law.

3. Why we process this data

Your data is processed to perform the contract you enter into when you pay: to produce the report, give you access to it and handle refunds (Article 6(1)(5) of Russian Federal Law No. 152-FZ). Public Instagram data and technical data are processed on the basis of legitimate interests (Article 6(1)(7)), Yandex Metrica on the basis of your consent (Article 6(1)(1)), and your requests to us on the basis of Article 6(1)(1) and (2). To answer them, we process your email address or Telegram username and the content of the request.

4. Who else sees it

• Cloudflare, Inc. (USA): the back end of the site and the Bot, storage of reports, order records and service data, inbound support mail, protection from automated requests;
• Selectel JSC (Russia): the server that hosts the site and our database in Moscow;
• Resend (Plus Five Five, Inc., USA): transactional emails to you and emails sent from our support address;
• Telegram Messenger Inc. (British Virgin Islands): Bot messages and report files, Telegram Stars payments, order notifications to us (a notice about an undelivered email includes your Telegram username, if you gave one), and messages you send us in Telegram;
• HikerAPI (Republic of Kazakhstan): our source of public Instagram data. It receives the usernames, IDs, topics and search queries for which the service needs public data;
• payment processors: to take payments and make refunds;
• YANDEX LLC (Russia): Yandex Metrica, only with your consent (section 5).

We do not sell data.

5. Analytics

We use Yandex Metrica (YANDEX LLC, Russia) on the public pages of the site to promote our services, and only after you accept it in the cookie banner. It records the page, referrer, clicks, device and browser type, approximate region and a visitor ID (ClientID). The ClientID is saved with your order, and after payment the amount and time of the purchase are sent to Metrica for ad statistics. You can decline or withdraw consent with the Cookie settings button at the bottom of any page or by writing to support@sled-inst.pro. The service works either way. Metrica is not enabled on the report page. Session recording (Webvisor) is switched off everywhere.

6. Security

On the site your report is reachable only through a long random link that is not published, not indexed by search engines and not cached. Anyone holding that link can open the report, so treat it as a password.

7. Your choices

You can ask us to delete your report, monitoring data, your email and your Telegram username before the relevant storage period expires. Write to support@sled-inst.pro from the address used at checkout, or include your report link. We act on such requests within three business days.

8. Contact