Privacy Policy

1. Introduction

IGrab – Instagram Downloader ("we", "our", or "the Extension") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Hashed password (we never store plaintext passwords)

2.2 Device Information

For license management and device limits, we collect:

• Browser fingerprint (a pseudonymous identifier)
• Browser type and version
• Operating system

2.3 Usage Data

We track basic download counts to enforce free-tier limits. We do not collect:

• URLs of content you download
• Your Instagram credentials or session data
• Your browsing history
• Personal photos or media files

3. How We Use Your Information

• Account management — to authenticate you and manage your license
• Device management — to enforce the per-license device limit
• Usage limits — to track daily download counts for free-tier users
• Email communications — to send verification codes, password resets, and license receipts
• Payment processing — handled entirely by Razorpay; we do not store card details

4. Data Storage & Security

Your data is stored securely in MongoDB with encrypted connections. Passwords are hashed using bcrypt. All communication between the extension and our servers uses HTTPS encryption.

5. Third-Party Services

We use the following third-party services:

• Razorpay — for payment processing (Razorpay Privacy Policy)
• MongoDB Atlas — for database hosting
• Vercel — for server hosting

We do not sell, rent, or share your personal information with any other third parties.

6. Cookies

We use a single authentication cookie (token) to maintain your login session on the web portal. This is a functional cookie and is strictly necessary for the portal to work. We do not use tracking or advertising cookies.

7. Your Rights

You have the right to:

• Access your data via the dashboard
• Delete your account and all associated data by contacting us
• Export your data upon request
• Revoke device access from your dashboard

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days. Anonymous, aggregated usage statistics may be retained indefinitely.

9. Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of any material changes via email. Continued use of the extension after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us through our Support page.