Privacy Policy

• To run Checks and show you Reports: who followed, unfollowed, gained and lost followers, and who doesn't follow back.
• To create and secure your Account, and to recognise you when you return.
• To email you: confirmation of your sign-up, a message when results are ready, and alerts if tracking stops or something needs your attention.
• To answer your requests and support questions.
• To keep the Service safe — detecting abuse, rate-limit abuse, and automated misuse.
• To understand aggregate usage so we can improve the Service.
• To comply with legal obligations and to defend or enforce our rights.

We rely on your consent for account creation and email notifications, and on our legitimate interest in operating, securing, and improving the Service. You can withdraw consent at any time by turning off notifications, deleting your data, or closing your Account.

Transactional email is part of the Service: confirmation, results-ready messages, and alerts when a Check fails or tracking stops. You can switch notifications off in the dashboard, and you can delete your Account at any time. Waitlist sign-ups only receive news about Pro access.

We do not sell or rent personal information. We share it only in these cases:

• Service providers — hosting and database, email delivery, and the provider that returns Instagram's public list data. Each processes data on our instructions and under confidentiality obligations.
• Legal requirements — if we are required to disclose information by law, or to protect rights, safety, or property.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, your information may move with the business; we would tell you if that changes how your data is used.
• With your consent — where you have asked us or agreed to a specific sharing.

Reports are visible only to the signed-in Account that tracks them. We do not publish your Reports or your email address to other users, and we do not show your activity to the Instagram account you track.

• Account and notification settings — while your Account exists.
• Snapshots and Reports for a Tracked Account — while tracking is on. Pausing stops new Checks but keeps your history; resuming continues from where you left off.
• After you delete your data or Account — your Account, Tracked Account, and Report history are removed from the live system. Copies held in routine backups disappear as those backups are rotated, and we delete anything still held by a provider on request.
• Support correspondence — up to three years after the conversation ends, so we can answer follow-up questions and handle disputes.
• Security logs — kept for a short period for abuse prevention, then rotated out.

Wherever you live, you can ask us to access, correct, or delete your personal information, restrict or object to our processing of it, or receive a copy of it in a portable format. You can also withdraw consent at any time. Many of these you can do yourself in the dashboard.

To exercise a right, email hello@similarity-api.com and tell us which Account you mean. We may ask you to confirm your email address before we answer. We reply within the period the law where you live allows, and we'll explain any refusal.

If you are unhappy with our answer, you can complain to your local data protection authority — in Bulgaria that is the Commission for Personal Data Protection.

The Service stores your sign-in session in your browser's local storage so you stay signed in, and uses strictly necessary browser storage for preferences and for the tracker's own state. We run no advertising networks, no third-party analytics, and no marketing cookies — there is nothing here for a ad tracker to read.

Your information is processed and stored on servers operated by our providers, which may be located outside your country. Where a transfer needs safeguards, we rely on the standard contractual clauses or another lawful transfer mechanism.

Access to tracker data is restricted to our own server-side code — your browser never reads the database directly — and we use scoped credentials, encrypted connections, and least-privilege access. No method of storage or transmission is completely secure, so we also minimise what we collect in the first place: no Instagram passwords, no payment details, no tracking of private accounts.

The Service is not directed at children under 16 and we do not knowingly collect their personal information. If you believe a child has given us information, tell us and we'll remove it.

We may update this Policy. When we do, we revise the "Last updated" date above and, for material changes, tell you by email or with a notice in the Service before they take effect.

Questions about this Policy or about your data? Email hello@similarity-api.com — operator: Sia EOOD. You can also use the Contacts page, or read our Terms of Service.