Privacy Policy

The Service is operated by FollowLens (“FollowLens”, “we”, “us” or “our”). For the purposes of data protection law, we are the controller of the personal information described in this policy — except for the Instagram data described in Section 4, which we never receive.

If you have any questions, contact us at our support page (GitHub Issues).

3.1 Account information

When you sign in to the Extension with Google, our authentication provider Supabase receives from Google your email address, name, profile picture and a unique account identifier. We use this only to create your FollowLens account and link it to your plan (your “license”). We do not receive your Google password, and we do not request access to your Gmail, Google Drive, contacts or any other Google data.

3.2 Payment and subscription information

Payments are processed by Stripe. We store your Stripe customer ID and subscription ID, together with your plan, subscription status and renewal or expiry dates, so the Extension knows whether Pro is active. Card and PromptPay payment details are collected and processed directly by Stripe; we never see or store your full card number.

3.3 Plan usage information

To apply Free plan limits (for example, the number of detailed profile checks or manual unfollows used per day), the Extension may keep simple counters linked to your account. These counters contain only numbers and dates — no Instagram usernames or content.

3.4 Technical information

When the Extension contacts our license service, our infrastructure providers automatically process standard technical data such as IP address, request timestamps and error logs, for security, abuse prevention and reliability. This website does not use analytics, advertising or tracking cookies; it only stores your language preference in your browser's local storage.

3.5 What we do not collect

• Your Instagram password or login credentials.
• Your Instagram follower or following lists, profile data, posts, messages or any other Instagram content.
• Your browsing history or activity on websites other than instagram.com.

To show you its analysis, the Extension reads information from instagram.com inside the browser tab where you are already logged in — for example, the accounts you follow, the accounts that follow you, and profile details such as username, display name, whether a profile picture is set, post and follower counts, and bio text. It uses this information to calculate relationships, flags, spam scores and mutual friends.

All of this processing happens locally in your browser. Scan results, your whitelist and your unfollow history are stored in the Extension's local browser storage (chrome.storage) on your device. This data is never transmitted to our servers or shared with any third party. Actions you take, such as unfollowing or re-following an account, are sent directly from your browser to Instagram, just as if you had clicked the button on Instagram yourself.

You can delete this local data at any time by clearing it in the Extension or by uninstalling the Extension.

We use the information described in Section 3 only to:

• create and authenticate your FollowLens account;
• verify your license and unlock Pro features;
• process payments and manage subscriptions, cancellations and refunds through Stripe;
• respond to your support requests;
• keep the Service secure and prevent fraud or abuse; and
• comply with our legal, tax and accounting obligations.

We do not sell your personal information, use it for advertising, or use it to build profiles about you. Where the law requires a legal basis, we rely on the performance of our contract with you, our legitimate interest in keeping the Service secure, and compliance with legal obligations.

FollowLens's use and transfer of information received through the Extension, including information received from Google APIs, will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. In particular:

• we use user data only to provide and improve the Extension's single purpose — follower analytics and follow management for your own Instagram account — and features that are visible to you;
• we do not transfer user data to third parties, except as necessary to provide the Service (for example, to the service providers listed in Section 7), to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to users;
• we do not use or transfer user data for personalized advertising;
• we do not sell user data, and we do not use or transfer it to determine creditworthiness or for lending purposes; and
• we do not allow humans to read user data, unless you give us your explicit consent (for example, when you contact support), it is necessary for security purposes such as investigating abuse, it is required to comply with applicable law, or the data is aggregated and anonymized for internal operations.

We share personal information only with the service providers that help us run the Service, and only as needed for them to do so:

• Supabase — user authentication and the database that stores your account and license records. Privacy policy
• Google — Google Sign-In, used to verify your identity. Privacy policy
• Stripe — payment processing, subscription billing, PromptPay payments and the customer portal. Privacy policy
• Our website hosting provider — serves this static website and may process standard server logs.

These providers process information on our behalf under their own terms and privacy policies. We may also disclose information if required by law, or to protect the rights, safety and security of our users, the public or ourselves.

Our service providers may process information in countries other than the one where you live, including the United States. Where required, we rely on appropriate safeguards — such as the standard contractual clauses offered by our providers — to protect your information.

• Account and license data is kept for as long as your account is active. If you ask us to delete your account, we delete it within 30 days.
• Payment and transaction records may be kept by us and by Stripe for as long as required by tax, accounting and other legal obligations.
• Support emails are kept for as long as needed to resolve your request, and then for a reasonable period for record-keeping.
• Local Instagram data stays on your device until you clear it in the Extension or uninstall the Extension. We never hold a copy.

Depending on where you live — for example under Thailand's Personal Data Protection Act (PDPA), the EU/UK GDPR or California privacy law — you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent at any time.

To request deletion of your data or to exercise any other right, email our support page (GitHub Issues) from the email address linked to your Google sign-in, with the subject “Data request”. We may need to verify your identity before acting on the request, and we will respond within 30 days. Deleting your account does not automatically cancel an active subscription — please cancel it first via “Manage subscription & invoices” in the Extension.

You also have the right to lodge a complaint with your local data protection authority (in Thailand, the Office of the Personal Data Protection Committee).

We use industry-standard measures to protect your information, including encrypted connections (HTTPS), access controls and the security features of our service providers. No method of transmission or storage is completely secure, but we work hard to protect your information — and to limit the data we hold in the first place.

The Service is not directed to children. You must be at least 13 years old — or the minimum age required in your country to use Instagram and to consent to the processing of personal data — to use the Service. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will change the effective date at the top of this page. If the changes are significant, we will give you notice through the website or the Extension before they take effect.

This policy is available in English and Thai. If there is any inconsistency between the two versions, the English version prevails, unless the law requires otherwise.

FollowLens
Email: our support page (GitHub Issues)