Privacy Policy

Who we are

ScrollScanner (“we”, “us”) is a research tool at scrollscanner.comthat connects to AI assistants (such as Anthropic’s Claude) and helps you research what content is performing well on Instagram. Questions or requests about this policy: griffin@hirebarry.com.

Data we collect

Account data. When you sign up or sign in — on our site or through an AI-assistant connector — our authentication provider (WorkOS) processes your email address, basic profile details from your chosen sign-in method, and session information. We store your email address and an account identifier.

Sign-in with Google.If you sign in with Google, we receive only your basic profile information (name, email address, profile picture) to authenticate you. We never access your Gmail, Drive, contacts, or any other Google content. ScrollScanner’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Usage and billing data. Each search you run is metered: the kind of search, how many posts it processed, the credits it used, and when it ran. We keep this to operate the credit system, show you your history, and prevent abuse.

Technical data. Standard server logs (IP address, request metadata) for security and reliability. We use session cookies to keep you signed in — no advertising or cross-site tracking cookies.

What we never collect

We never ask for or receive your Instagram (or other social-media) credentials. We can’t post, comment, or act on your behalf anywhere. We don’t sell personal data, and we don’t use it for advertising.

Public content we process

Search results are built from publicly available social-media content (public posts, captions, engagement metrics, and account handles) obtained through licensed data providers, and analyzed with AI models to rank and verify results. This content belongs to its creators and platforms; we surface links back to the original posts.

How we use your data

To provide the service: authenticate you, link your AI-assistant sign-in to your one ScrollScanner account, meter and charge credits, show your usage history, send essential service emails (sign-in codes, receipts), keep the service secure, and comply with law. That’s the whole list.

Who processes data for us

We use a small set of infrastructure providers: WorkOS (authentication), Supabase (database), Vercel (website hosting), Google Cloud (API hosting and AI analysis of public content), and licensed social-media data providers. When you buy credits, payment is handled by our payment processor — we never see or store card numbers. These providers process data only to run ScrollScanner.

Retention and deletion

We keep account and usage data while your account is active. Email griffin@hirebarry.comfrom your account address to delete your account — we erase your profile, sign-in links, and usage history, keeping only billing records we’re legally required to retain.

Security

All traffic is encrypted in transit (TLS). Credentials and API keys are stored in managed secret stores with least-privilege access, and the database enforces row-level access controls.

Children

ScrollScanner is not directed at children and requires users to be at least 13.

Changes

If this policy changes materially, we’ll update this page and the date above, and notify active accounts by email for significant changes.