Privacy Policy

Last updated: September 8, 2026

This Privacy Policy explains what information Audigram collects, how we use it, and the choices you have. It covers the Audigram account and sign-in system on this website (audigram.io) and the Audigram browser extension. If you have questions, contact us at info@audigram.io.

1. Information we collect

Account information. When you create an Audigram account, we store your email address, an internal account role, and account timestamps (creation and, if applicable, deletion). If you sign up with a password, your password itself is never stored by Audigram in readable form; it is handled entirely by our authentication provider, Supabase, using industry-standard hashing.

Signing in with Google. If you choose to sign in with Google, Google shares your basic profile information (your name, email address, and profile picture) with us so we can create or match your Audigram account. We use this solely to authenticate you — Audigram does not request or receive access to your Gmail, Google Drive, Google Contacts, or any other Google product or data.

Information the extension reads from Instagram. The Audigram browser extension audits who you follow on Instagram. To do this, it reads information — such as your following list, follower list, and public profile and post details — directly from Instagram’s own systems, using your own, already-signed-in Instagram session in your browser. This happens entirely inside your browser: Audigram’s servers never receive your Instagram username, follower or following lists, posts, or any other Instagram content. When you choose to unfollow an account through Audigram, that action is likewise sent directly from your browser to Instagram using your own Instagram session — our servers are not involved in, and do not see, that action.

Information stored locally by the extension. The extension keeps some information only on your own device, using your browser’s local storage — for example, in-progress scan and unfollow-queue state, your protect/whitelist selections, and historical audit results. This local data is scoped to your Instagram account and stays on your device; it is not transmitted to Audigram.

Backend and session information. To keep you signed in to the extension, our backend stores session records tied to your account — including hashed (not plaintext) access and refresh credentials, expiration times, and whether a session has been revoked. We also temporarily record short-lived, “pending sign-in” records while you approve a sign-in from the extension.

Abuse-prevention information. To protect the sign-in system from abuse, we apply rate limiting to repeated requests. The identifiers used for this are derived using a one-way cryptographic function (HMAC) rather than stored as your raw IP address — we do not keep a table mapping your account to your IP address.

Information we do not collect. Audigram does not collect payment information (we do not currently offer any paid plan), does not use advertising or third-party tracking scripts on this website, and does not access your Instagram password — the extension only ever uses the Instagram session already present in your own browser.

2. How we use information

We use the information described above to:

• create and maintain your Audigram account and keep you signed in;
• operate the extension’s audit, review, and unfollow features;
• protect the service from abuse, fraud, and unauthorized access;
• send you service email — such as sign-up confirmation and password-reset messages — through our email provider, Resend;
• diagnose and fix problems with the service; and
• comply with legal obligations.

3. How we share information

Audigram does not sell your personal information, and we do not share it with advertisers. We share information only with the service providers that help us run Audigram, and only as needed for that purpose:

• Supabase — hosts our database and authentication system (account records, sessions, and password/email sign-in).
• Vercel — hosts this website and our backend (audigram.io, api.audigram.io, and config.audigram.io).
• Resend — delivers account-related emails (such as sign-up confirmation and password reset) on our behalf.
• Google — provides the “Sign in with Google” option, if you choose to use it.

We may also disclose information if required by law, or to protect the rights, safety, or property of Audigram, our users, or others.

4. Data security

We apply Row Level Security and least-privilege access controls in our database, so that application code and services can only access the specific data they need. Session credentials are stored as one-way hashes rather than in plaintext, and all communication with our website and backend is encrypted with HTTPS. No method of transmission or storage is completely secure, so while we work to protect your information, we cannot guarantee absolute security.

5. Data retention

We keep account and session information for as long as your account is active, or as reasonably needed to provide the service, resolve disputes, and enforce our agreements. Rate-limiting records are short-lived and are periodically cleared automatically. If you would like your account and associated data deleted, contact us at info@audigram.io and we will process your request.

6. Your rights and choices

You can ask us to access, correct, or delete the personal information we hold about you at any time by emailing info@audigram.io. Depending on where you live, you may have additional rights under local law — for example, the right to receive a copy of your data or to object to certain processing. We will respond to reasonable requests within a reasonable time.

You can also uninstall the Audigram browser extension at any time from your browser’s extension settings, which stops all local data collection described above immediately.

7. Children’s privacy

Audigram is not directed to children, and Instagram itself requires users to meet its own minimum age requirement. We do not knowingly collect personal information from children under 13.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above. Your continued use of Audigram after a change becomes effective means you accept the updated policy.

9. Contact us

Questions about this policy or your information? Email us at info@audigram.io.