Privacy policy

AI Growth is a service run by FamForma (Ontario, Canada). It helps small businesses understand and improve their online presence, including their Instagram account. This policy explains what we collect, why, who helps us process it, how long we keep it and how you can delete it. Questions: famforma.ai@gmail.com.

What we collect

• Your account: your name, email address and a securely hashed password.
• Your business: what you enter during setup, such as the business name, category, location, main goal, website and description.
• Your public website: if you give us your website, we read its public pages and keep short facts we extract from them (not full copies of the pages).
• Instagram, only if you connect it: with your permission, we read your Instagram Business or Creator account through Meta's official Instagram API: profile details (username, name, account type, bio, website, follower and following counts), your recent posts and Reels (captions, type, date, link and their numbers such as reach, views, likes, comments, saves and shares), account totals (reach, profile activity, follower changes) and audience summaries (top cities, countries, age groups and gender, as totals only, never individual followers).
• Analyses we create for you: the findings and recommendations our AI writes from the data above.
• Consultation requests: if you use the form on our home page, the name, business name, email or phone and message you send us, used only to contact you about your request.
• Free website checks: if you check a website on our home page, its address and the result. To limit how many free checks one visitor can run, we also keep a scrambled code made from your internet (IP) address; it can't be turned back into the address. We don't ask for your name or email to run a check.
• Technical data: sign-in cookies, and basic request logs and error reports used to keep the service secure and working.

We only ask Instagram for read-only access. We never post, comment, send messages or change anything on your account, and we never see your Instagram password.

How we use it

• To run your account and show you your dashboard.
• To analyze your business, website and Instagram and give you recommendations.
• To keep the service secure, fix errors and prevent abuse.
• To answer you when you contact us.

We do not sell your data, we do not use it for advertising, and we do not share your Instagram data with anyone except the service providers below, only to run AI Growth.

AI analysis

When you ask for an analysis, we send the relevant business, website and Instagram facts to OpenAI, which writes the findings and recommendations. We send only what the analysis needs, never your password or access keys. OpenAI's business terms say data sent through its API is not used to train its models by default. AI can make mistakes, so every finding shows the numbers it is based on.

Who helps us (service providers)

• Vercel: hosts the app, and runs an invisible check that the free website check is used by a person, not a bot.
• Neon: stores our database and handles sign-in and password reset emails (servers in the United States).
• OpenAI: writes the AI analyses.
• Sentry: error reports, set up so it does not receive IP addresses, cookies or what you type.
• Meta: the source of your Instagram data, only when you connect your account.
• Google: its free PageSpeed tool checks how fast your public website loads on phones. We send it only your website's address.

Some of these providers store data outside Canada, mainly in the United States, where it may be accessible to authorities under local law.

How we protect it

Data is encrypted in transit. Your Instagram access key is stored encrypted, and only our servers can use it. Each account can only see its own data.

How long we keep it

• Account and business data: until you delete it or ask us to delete your account.
• Instagram data: while your account is connected. We keep the 10 most recent full readings, plus daily account totals (people reached and new followers, numbers only) for up to 13 months so we can show your progress over time. When you disconnect, or remove our app in Instagram, we delete your access key, every reading, the daily totals and every Instagram analysis straight away.
• Consultation requests: up to 12 months after our last contact with you, unless you become a client or ask us to delete them sooner.
• Free website checks: up to 12 months, then deleted. We reuse a result for 24 hours so the same website isn't checked again and again.
• Logs and error reports: kept for a limited time by our providers (error reports up to 90 days).

Your choices and rights

You can ask to see, correct or delete your personal information, or withdraw your consent, by emailing famforma.ai@gmail.com. We answer within 30 days. See how to delete your data for the quickest ways. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Cookies

We use only the cookies needed to keep you signed in and to complete a secure Instagram connection. We do not use advertising or tracking cookies.

Children

AI Growth is for business owners and is not meant for anyone under 18.

Changes

If we change this policy, we will update the date at the top and, for important changes, tell you by email or in the app.