Legal
Privacy Policy
FollowGone (“FollowGone”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the FollowGone website and related services at followgone.com (collectively, the “Service”).
By accessing or using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service. When you create an account, you confirm that you have read this Privacy Policy and consent to our data practices as described, subject to any additional choices presented in the product (for example, marketing preferences where applicable).
This Privacy Policy should be read together with our Terms of Service, which governs your use of the Service.
“Personal data” or “personal information” means any information that can identify you directly or indirectly. “Processing” means any operation we perform on personal data, such as collection, storage, use, or deletion.
Third-party sites linked from the Service have their own policies; this Policy does not apply once you leave our website.
Information We Collect
Account and profile data
When you register, we collect identifiers needed to run your account, such as your email address and authentication-related data. You may also provide optional profile details (for example, a display name or avatar) where the product allows it.
Instagram data you upload (core product data)
FollowGone is built around data you obtain from Instagram's official data export and voluntarily upload (for example JSON or archive files, or parsed follower and following lists derived from that export). We process this content only to provide the Service— such as generating follower insights, snapshots, and related reports inside your account — and not for unrelated purposes such as advertising profiling or resale.
FollowGone is not affiliated with, endorsed by, or sponsored by Instagram or Meta Platforms, Inc.
Automatically collected data
When you use the Service, we may automatically collect:
- Log data: IP address, browser type and version, pages viewed, timestamps, and similar technical telemetry from your visits.
- Diagnostics: error reports or performance data to keep the Service stable and secure.
- Usage data: which product areas you use (for example, to understand feature adoption). Where we use analytics, we configure privacy-oriented, first-party style tooling (see our subprocessors list below) and do not use third-party advertising trackers on the site for cross-site behavioral tracking.
- Device context: device type and operating system as sent by your browser.
Your IP address may allow an approximate region or city-level inference for security, fraud prevention, or coarse analytics. We do not request or collect precise GPS location from your device for the Service.
Payment data
Paid plans are handled by our payment processor (Stripe). We receive limited billing metadata (for example subscription status); card numbers and full payment credentials are processed by Stripe according to its terms and privacy policy.
What we do not collect
We do notcollect your Instagram password or other Instagram login credentials. We do not log in to Instagram for you, scrape Instagram, or request access to your phone's contact list for the Service.
How We Use Your Information
We process personal data to:
- Provide, maintain, secure, and improve the Service;
- Parse and store the Instagram export-related data you upload so we can generate insights and reports you request;
- Authenticate sessions, prevent abuse, and enforce our Terms of Service;
- Send transactional and service-related messages (for example, receipts, security alerts, and account notices);
- Respond to support requests and troubleshoot issues;
- Operate first-party analytics to understand usage and reliability (not for cross-context behavioral advertising);
- Meet legal, tax, and regulatory obligations.
Sale of Data, Ads, and Profiling
We do not sell your personal data and we do not rent it. We do not run third-party display advertising on the Service based on your activity here, and we do not perform behavioral profiling for cross-context targeted ads. Optional marketing communications, where offered, are handled separately from core product processing and in line with your choices and applicable law.
Legal Bases for Processing (EU / EEA & UK)
Where the GDPR or UK GDPR applies, we rely on one or more of the following legal bases:
- Contract — to deliver the Service you request (including account access, uploads, and billing);
- Legitimate interests — to secure, debug, and improve the Service, prevent fraud, and understand aggregate usage; you may object to processing based on legitimate interests where applicable law allows;
- Consent — where we ask for consent (for example, certain cookies or optional marketing), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal;
- Legal obligation — where we must retain or disclose data to comply with the law.
Free Trial Eligibility
Free access periods or trials may be limited to one per user or account. Creating multiple accounts to obtain additional trials may violate our Terms of Service and can result in suspension or termination.
Security of Your Personal Information
We use administrative, technical, and organizational safeguards designed to protect personal data, including encryption in transit (such as TLS for web traffic), access controls aligned with least-privilege principles, and trusted infrastructure providers. Where encryption at rest is supported by our systems and providers, we use industry-standard configurations.
No method of transmission or storage is completely secure; we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and for any activity under your account.
How Long We Keep Your Personal Information
We retain personal data only as long as needed for the purposes in this Policy, to comply with legal obligations, or to resolve disputes and enforce our agreements.
Uploaded reports. Data derived from your Instagram exports (for example snapshots and connection history) is kept to power your account until you delete it or delete the linked Instagram account / your user account, subject to technical backups and legal holds. You can delete individual snapshots from the Service where the product provides deletion controls.
After account deletion, we delete or irreversibly anonymize personal data within a reasonable period unless a longer period is required by law. For accounts with no sign-in or meaningful use for an extended period, we may delete or anonymize data after providing notice where required by law (for example, after approximately twenty-four months of inactivity).
Children's Privacy
The Service is not directed at children under 13, and we do not knowingly collect personal data from children under 13.
If we learn that we have collected personal data from a child under 13 without appropriate consent, we will take steps to delete that information and may disable the associated account, subject to applicable law.
Sharing and Disclosure
We do not sell or rent your personal data. We share personal information only as described below and with processors that provide services to us under appropriate confidentiality and data-processing terms where required by law.
We may disclose personal information to:
- A parent, subsidiary, or affiliate of our company
- Third-party service providers for the purpose of enabling them to provide their services, including IT service providers, data storage, hosting and server providers, analytics, error loggers, maintenance, marketing providers, professional advisors, and payment systems operators
- Our employees, contractors, and/or related entities
- Our existing or potential agents or business partners
- Courts, tribunals, regulatory authorities, and law enforcement officers, as required by law
- An entity that buys, or to which we transfer all or substantially all of our assets and business
Third parties we currently use:
- Stripe — payment processing
- Cloudflare — CDN Services
- Railway Cloud — hosting and server infrastructure
- Resend — transactional email
- Umami — privacy-friendly analytics
International Transfers
We and our subprocessors may process and store personal data in the European Economic Area, the United Kingdom, the United States, and other countries where we or our providers operate. Those countries may have data-protection laws that differ from the country where you live.
Where we transfer personal data from the EEA, UK, or Switzerland to countries not recognized as providing an adequate level of protection, we implement appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement / Addendum, or other lawful transfer mechanisms together with supplementary measures where appropriate.
Your Rights and Controlling Your Personal Information
Your choice
By providing personal information to us, you understand we will collect, hold, use, and disclose your personal information in accordance with this privacy policy. You do not have to provide personal information to us, however, if you do not, it may affect your use of our website or the products and/or services offered on or through it.
Access, portability, deletion, and restriction
Depending on your location, you may have the right to access a copy of the personal data we hold, to receive it in a portable format, to request correction or deletion (“right to be forgotten”), and to object to or restrict certain processing. Contact us using the details below to exercise these rights.
Correction
If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, please contact us using the details provided in this privacy policy. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or out of date.
Response time
We aim to respond to verifiable privacy requests within thirty (30) days, or within any shorter period required by applicable law. If we need more time, we will let you know the reason and extension period where the law allows.
Supervisory authority
If you are located in the EEA, UK, or Switzerland and believe we have processed your data in violation of applicable law, you have the right to lodge a complaint with your local data protection authority.
Non-discrimination
We will not discriminate against you for exercising any of your rights over your personal information.
Notification of data breaches
We will comply with laws applicable to us in respect of any data breach.
Complaints
If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will investigate your complaint and respond in writing.
Unsubscribe
To unsubscribe from our email database or opt-out of communications, please contact us using the details provided in this privacy policy, or opt-out using the opt-out facilities provided in the communication.
Cookies and Similar Technologies
The Service is delivered primarily through our website. We use cookies and similar technologies that are necessary for authentication, security, and core functionality (for example, keeping you signed in). We do not use third-party advertising or cross-site tracking cookies to follow you around the web for behavioral ads.
We may use first-party or privacy-oriented analytics to measure aggregate usage and reliability. Details about categories of cookies and your choices are in our Cookie Policy.
Business Transfers
If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data, including your personal information, among the assets transferred to any parties who acquire us.
Changes to This Policy
We may update this Policy from time to time. We will post the updated Policy on this page with a new “Last updated” date.
If we make material changes, we will provide at least thirty (30) days' advance notice where practicable, for example by email to the address on your account or by an in-product notice. Continued use of the Service after the effective date may constitute acceptance of the revised Policy where permitted by law.
Regional Disclosures
Australia (Privacy Act)
Where the disclosure of your personal information is solely subject to Australian privacy laws, you acknowledge that some third parties may not be regulated by the Privacy Act and the Australian Privacy Principles. You acknowledge that if any such third party engages in any act or practice that contravenes the Australian Privacy Principles, it would not be accountable under the Privacy Act, and you will not be able to seek redress under the Privacy Act.
European Union, EEA & UK (GDPR)
We, FollowGone, act as a Data Controller for personal data described in this Policy. We will only collect and use your personal information when we have a legal right to do so — lawfully, fairly, and in a transparent manner.
Our lawful bases are summarized in the section “Legal Bases for Processing (EU / EEA & UK)” above. You also have the right to restrict processing, object to processing, request data portability, and request deletion of your personal information, subject to exceptions under applicable law.
California (CCPA)
Under California Civil Code Section 1798.83, if you live in California and your business relationship with us is mainly for personal, family, or household purposes, you may ask us about the information we release to other organizations for their marketing purposes. In the past 12 months, we have collected identifiers (such as email address and IP address) and coarse network-derived location inferred from IP address where available. We do not sell or share personal information for cross-context behavioral advertising as defined under California law.
California residents have the right to know about and delete personal information we have collected. At this time, we do not respond to browser “Do Not Track” signals.
Contact Us
For any questions or concerns regarding your privacy, please contact us at: