privacy policy

What we collect

Your account details: your name, your email address and your password, held hashed.

For each Instagram account you connect: its username, name, bio and profile picture, its follower, following and media counts, and for each post the media, the caption, and the metrics Instagram reports, including reach, saves, shares, views, profile visits, follows and average watch time.

An access credential for the connected Instagram account, encrypted at rest with AES-256-GCM.

What you make with the product: the reads, ideas and briefs Contentiser writes, any AI video drafts made from a brief, whose video files are kept in private file storage, and the creators matched to a brief.

Product analytics about how the app is used, and error reports when something fails.

If you ask for a demo or a trial on the website: your name, email address, agency, how many clients you manage, your message and the plan you asked about, so we can answer you. With it, a keyed hash of your IP address, used only to stop repeated requests and cleared after a day; the address itself is never stored.

What we do not collect

We never receive, and Instagram never exposes, the identity of individual people who viewed, liked or followed from a post. All audience data is aggregate.

Pages shared onward by a link are excluded from product analytics, so a client or creator you send a link to is not profiled.

Error reports strip emails, IP addresses, tokens, cookies, request headers and query strings before storage. People are counted with a keyed hash: how many, never who.

Why we hold it

To read your content and produce the analysis, recommendations and briefs you are paying for.

To keep your Instagram connection alive, and to tell you when it is failing.

To keep the product working, which means error reports and usage analytics.

Who we share it with

Instagram, through Meta's Graph API, to read the account you connected.

Our analysis model providers, who receive the post media and caption in order to read it. They do not train on it.

Google's video model, when you ask for an AI video draft: it receives the shot descriptions written into the brief, not your clients' posts or accounts.

A creator network, when you ask for creators who fit a brief: it receives search terms drawn from the brief, such as a niche, never your clients' accounts.

Our hosting, database, file storage, email, analytics and error-reporting providers.

We do not sell personal information to anyone.

If you join as a creator

What we collect: the profile you fill in (your name, where you are based, your niches, the kind of videos you make, your languages, a short bio, your handles and your rate guide), your Instagram username, follower and post counts and an engagement figure if you connect Instagram, the samples of your work you add, including any video you upload and a picture drawn from it, and a record of each time you agreed or stopped agreeing to be contacted, with a keyed hash of your network address rather than the address itself.

Why: to let agencies using Contentiser find you and contact you about paid briefs, and only while you agree to it. You can stop at any time from your account, and you stop being shown to agencies straight away.

Who sees what: agencies see your name, handle, where you are based, your niches, your verified follower count and your samples. They never see your email address or your rate guide. Our team sees your whole profile, to keep the network honest.

How long: until you delete your account. Your Instagram access credential is encrypted at rest and is never used to post anything.

You can download everything we hold about your creator account, and delete it, at any time from your account page. You can also write to systems@contentiser.com.

Where it goes

Our providers operate outside South Africa. Where personal information is transferred across a border it is transferred under the provider's own contractual protections.

How long we keep it

Posts and analyses are kept while the account is connected, and after a disconnection, so that reconnecting the same account restores its history rather than re-reading and re-charging for it.

AI video files are deleted after a retention period, and the record of each draft is kept with the account.

You can delete your account yourself at any time, from Settings. That deletes it and everything attached to it, at once: every connected Instagram account with its posts, analyses, reads, ideas and briefs, every AI video draft and its video file, and every creator match found for your briefs. You can also ask us to do it by writing to systems@contentiser.com.

Your rights

Under POPIA you may ask what we hold about you, ask us to correct it, ask us to delete it, and object to how we use it. Write to systems@contentiser.com and we will answer.

You can download a copy of everything we hold about your account at any time, from Settings, as a single file. You can also ask for it by writing to systems@contentiser.com.

If an agency connected your Instagram account to Contentiser, you can remove Contentiser in your Instagram settings, which disconnects it, and ask there for your data to be deleted. We then delete everything held from that Instagram account, by every agency that connected it, and give you a confirmation code and a page to check that it was done.

You may also complain to the Information Regulator of South Africa.