Privacy Policy

Adtrafix Match Creator Marketplace · last updated 2026-10-08

Adtrafix Match connects creators with brands. This policy describes what we collect, why, and how you remove it. It is written to be checked against the software: every claim here corresponds to code in this application.

What we collect from Instagram

When a creator connects an Instagram professional account through Meta's official OAuth flow, we request exactly four permissions and nothing else:

• instagram_basic — username, account type, profile information
• instagram_manage_insights — reach, impressions, views, engagement, and aggregate audience age, gender and location
• pages_show_list — to confirm which Facebook Page is linked
• pages_read_engagement — post-level engagement on the linked Page

We never see or store your Instagram or Facebook password. We do not read direct messages, follower lists, or anything belonging to other people. Audience data is aggregate and statistical — we do not receive the identities of your followers.

What we collect directly

Name, email, phone number, and everything you type into your profile: category, languages, bio, rates, formats and availability. This is clearly separated from API-sourced data everywhere it is displayed.

How it is used

To match creators with campaign briefs, to show brands the audience and performance data behind that match, and to run campaigns and payments. We do not sell personal data. We do not use your data to train advertising models.

How it is stored

Platform access tokens are encrypted at rest with AES-256-GCM, are never written to logs, and are never returned by any endpoint your browser can reach. Metrics are stored as dated snapshots so brands can see how performance changes over time.

Your rights

• Disconnect — stops all syncing and deletes API-derived metrics within 24 hours. Available in your account settings at any time.
• Delete — removes your account, profile, tokens and historical snapshots. See data deletion.
• Export — request a machine-readable copy of everything we hold about you.
• You can also revoke our access from Meta's own app settings, which we honour through Meta's deauthorize callback.

Retention

Metric snapshots are retained for 24 months. Campaign financial records are retained as required by Indian tax law and are anonymised once you delete your account.

Contact

Data protection queries: conversation@adtrafix.com.