Privacy Policy

1. Who we are

Oxevo (“we”, “us”, “our”) operates the website and service available at oxevo.app. Oxevo is an Instagram analytics platform that helps creators and businesses understand their audience and content performance.

For questions about this policy, contact us at lxrellscott@gmail.com.

2. Information we collect

Account information

When you create an account we collect your email address and a hashed password.

Instagram data

When you connect your Instagram account, we access the following data via the Instagram API with your explicit authorisation:

• Your Instagram username and profile information
• Follower and following counts
• Media posts and associated metadata (captions, media type, timestamp)
• Post-level engagement metrics (likes, comments, shares, saves)
• Reach and impression data for your account and posts

Usage data

We collect standard web server logs, including IP addresses, browser type, and pages visited, to maintain the security and performance of the service.

Payment information

Payments are processed by Stripe. We do not store your card details. Stripe’s privacy policy applies to payment data.

3. How we use your information

• To provide and operate the Oxevo analytics service
• To display your Instagram performance data in your dashboard
• To generate shareable analytics reports
• To send transactional emails (account confirmation, password reset)
• To process payments and manage your subscription
• To diagnose technical problems and improve the service

We do not sell your personal data or Instagram data to third parties.

4. Data storage and security

Your data is stored securely using Supabase (PostgreSQL database). Instagram access tokens are encrypted at rest using AES-256 encryption before being stored.

We retain your account data for as long as your account is active. If you delete your account, your personal data and Instagram data are deleted within 30 days.

5. Third-party services

Oxevo uses the following third-party services to operate:

• Meta (Instagram API) — to access your Instagram data with your permission
• Supabase — database and authentication
• Stripe — payment processing
• Resend — transactional email delivery
• Netlify — web hosting and serverless functions

6. Instagram API data

Our use of data obtained via the Instagram API complies with Meta’s Platform Terms and Developer Policies. We only request permissions necessary to provide the analytics service. You can revoke Oxevo’s access to your Instagram account at any time via your Instagram account settings.

7. Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Disconnect your Instagram account from Oxevo at any time
• Export your data

To exercise any of these rights, email us at lxrellscott@gmail.com.

8. Cookies

Oxevo uses only essential cookies required for authentication (session tokens). We do not use advertising or tracking cookies.

9. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by email. Continued use of Oxevo after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, contact us at lxrellscott@gmail.com.