Privacy policy

Who we are

CoPromo is run by DeMind Inc. (“we”, “us”). It’s a marketplace where Instagram creators sell slots in their app recommendation posts and apps pay to be featured. This policy explains what we collect, why, who sees it, and how to have it deleted. Questions go to hello@trycopromo.com.

What we collect from creators

From Instagram, when you sign in and allow access. We use Instagram Login with two permissions, instagram_business_basic and instagram_business_manage_insights. With them we read:

• Your Instagram account ID, username, name, profile picture, follower count and account type.
• Your follower demographics (gender, age and country) as totals. We keep only a summary: the share of followers who are women, your biggest age group and your top three countries. We never see who your individual followers are.
• An access token, so we can refresh those numbers. It’s stored on our servers only.

We only read. We never post, comment, message or change anything on your account.

What you give us. Your roundups (topic, niche, dates, number of slots, price), notes to apps, draft images and captions you upload, the link to your live post, your payout method and details (such as a PayPal or Wise email, or bank details), and the tax form type and name you submit (W-9 or W-8BEN).

What we collect from apps

• Your email address and name, and those of teammates you invite.
• Your app profile: name, icon, store and website links, a one-liner, who it’s for, and your niches.
• Your brand kit: images, talking points, promo codes and things creators shouldn’t say.
• Notes you send creators, slide reviews, and your email preferences.
• Payments. Card payments are handled by Stripe, so we never see or store your full card number. We keep the amount, status, card brand, last four digits and Stripe’s reference IDs.

What we collect automatically

A sign-in cookie that keeps you logged in, and basic server logs (such as IP address, browser and the pages requested) that our hosting provider records for security and debugging. We don’t use advertising cookies or third-party trackers.

How we use it

• To show creators’ roundups to apps, with the creator’s follower count and audience summary.
• To let creators see the apps that ask to join, and pick them.
• To take payments from apps, hold them until the post is live, issue refunds, and pay creators.
• To check that a post went live as agreed before we pay out.
• To send the emails and in-app notifications the service depends on.
• To keep CoPromo secure, fix problems, and meet our legal and tax obligations.

We don’t sell personal data, and we don’t use Instagram data for advertising or to build profiles for anyone outside CoPromo.

Who can see it

• Apps on CoPromo see a creator’s username, profile picture, follower count, audience summary and roundup details. Payout and tax details are never shown to apps.
• Creators see the profile and brand kit of apps that ask to join their roundups, plus any note the app sends.
• Service providers that run parts of CoPromo for us, and only for that: Stripe (payments), PayPal and Wise (payouts), Resend (email), Railway (hosting), Meta (Instagram sign-in) and Google (sign-in for apps).
• Authorities, when the law requires it.

How long we keep it

We keep your data while your account is open. When you delete it, we remove your personal data right away (see Delete your data). We keep payment, payout and tax records for as long as the law requires, usually up to seven years. If you remove CoPromo’s access in Instagram, we delete our access token straight away.

Your choices

• Delete your data at any time from this page, by removing CoPromo in Instagram, or by emailing hello@trycopromo.com.
• Stop Instagram access in Instagram under Settings › Website permissions › Apps and websites.
• See, correct or export your data by emailing hello@trycopromo.com. We reply within 30 days.

Depending on where you live (for example the EU, the UK or California), you may have more rights, such as objecting to how we use your data or complaining to your local data protection authority. Email us and we’ll help.

Security

Everything is sent over HTTPS. Instagram access tokens never leave our servers, payout details are shown only to the creator they belong to, and only the people who run CoPromo can access the database.

Age

CoPromo is for people 18 and over. We don’t knowingly collect data from anyone younger.

Where your data is stored

CoPromo is run from the United States, and your data is stored and processed there and by the providers listed above.

Changes

If we change this policy, we’ll update the date at the top, and for big changes we’ll tell you by email or in the app.

Contact

DeMind Inc. · hello@trycopromo.com