Privacy Policy

1. Who we are

Media IQ is published by Ultra Scalability LLC. For any question about your data: contact@ultra-scalability.com.

2. Data we process

• Account: your email address; if you sign in with Google, your Google name and avatar (we only request "email" and "profile", never access to your mailbox or your files); if you sign in with a password, the password you chose (stored hashed, never in clear).
• Imported content: the posts you choose to connect (links, captions, thumbnails, media, and their analysis: transcripts, on-screen text, structured records). They are private, attached to your account and isolated from other users.
• Usage and billing: questions asked, credits consumed, payment history (handled by Stripe — we do not store your card).
• Technical: sign-in and error logs required for security and correct operation.
• Internal usage measurement: we count how many accounts sign up, link an Instagram account, pay, finish a first import and get a first sourced answer. These counts are read from the records already described above. When you arrive from a link we published, we also store which campaign it was (see section 7) on your account, so that we can tell which channels work. We do not build advertising profiles from your saved posts or questions. We also measure advertising as described below.
• Advertising measurement: on public pages, the Meta Pixel sends page views and browser information to Meta. Our servers use the Meta Conversions API to report signup, account linking and live purchases, including purchase value and currency. We send your email address normalized and hashed with SHA-256, a hashed account identifier, advertising click and browser identifiers, IP address, user-agent, page URL and event time. IP addresses and user-agents are not hashed. Hashing helps match an event to a Meta account; it does not make the data anonymous. Meta uses this data to measure and optimize ads and may use it for ad personalization. We do not send your saved posts, collection names, Instagram handle, questions or answers to Meta.
• Setup reminders: if you start on your phone, we use your email address, time zone and setup progress to send up to four reminders to finish in Chrome. These reminders stop when your account is linked. You can unsubscribe using the link in a reminder or your email provider's one-click unsubscribe control. Subscription confirmations are transactional and are separate from these reminders.
• Instagram connection (browser companion). Opening the companion checks which Instagram account is signed in and stores its handle and numeric ID locally, together with request tokens returned by Instagram. This can happen before import consent. These tokens are sent only to Instagram, never to Media IQ. The companion does not read your Instagram password, sign-in cookies or private messages. Your browser still sends Instagram its own cookies when making a request to Instagram. The Media IQ website can receive your connected handle through the linking feature before import consent. Your Media IQ linking code is stored locally and authenticates requests to our backend, including account and credit-balance checks before import consent. Request timing, action type, build identifier and error diagnostics support operation and security; account state and credit balances are also cached locally.
• Collection and creator reads. After import consent, the companion reads the full collection catalogue. It sends your handle and numeric ID, every collection ID and name, and measured sizes to Media IQ, including when you find collections before importing posts. Size checks read entries even in unselected collections to count them; they keep counts, continuation positions and, in this browser only, saved-post identifiers with the collections each belongs to, so a post saved in two collections counts once. Those entries are not imported and those identifiers are not sent to Media IQ. Selected imports send post links, codes, types and available dates. For public creators you explicitly choose one by one, it sends their handle, numeric ID, display name, post count and public post references. Private creator accounts are refused. It does not collect general browsing history or send media files from your browser. Collection lists and public creator reads may use an existing Instagram tab; size checks make requests directly from the companion. A permitted popup action, or your click on "I agree and connect" on the companion's own consent page, may open one Instagram tab in the background and leave it open. The website and background check cannot open one on their own; a request that needs a tab is skipped when none is available. No code runs on ordinary page loads.
• Checks and imports. The optional free check runs every six hours while Chrome can run it. It refreshes selected creator counts and compares previously measured collection sizes with your library. It does not detect new saves in collections: use a manual size check. Automatic imports require a separate switch; both options start off and can be turned off. Counting is free. Imports use credits: the button shows a base amount, and long carousels and videos over five minutes use more. Media IQ separately retrieves publicly accessible content for analysis; content requiring your Instagram login may remain unavailable. Data is transmitted over HTTPS. Chrome local storage holds connection and consent settings, identity, request tokens, collection names and measured sizes, the saved-post identifiers used for counting, credit balances, progress and bounded diagnostics. Chrome Sync is not used. Instagram tokens are cleared when the signed-in account changes; media files are not retained in this local storage.
• Creators referenced in your library. When you choose to track a public creator, Media IQ processes only public information about that account: its public profile (handle, numeric ID, display name, post count) and the public posts published by that account. Creators are added one at a time, by you, and private accounts are refused. We process it for one purpose only: letting you organize and follow public content you have explicitly chosen. Anyone whose public content is referenced can ask for it to be removed by writing to contact@ultra-scalability.com; removal is effective within 30 days.

3. Why

To provide the service (import, analyze and query your saves), secure your account, bill you, improve the reliability of these features, send setup reminders, and measure advertising. We do not use your content to train models and we do not sell it to anyone.

No library is public. Yours is visible to you alone, and we publish no part of any library — neither yours, nor another user's, nor one of our own.

Chrome Web Store Limited Use

Media IQ's use and transfer of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Data obtained through the browser companion is used only to provide and improve its purpose: bringing your selected Instagram saves and public creator content into your Media IQ library for search and questions, including operating and securing these features. It is not used for personalized advertising, sold to data brokers, or used to assess creditworthiness or for lending. Transfers are limited to those allowed by that policy. Human access is limited to your explicit consent for specific data, security needs, legal obligations, or aggregated and anonymized data for internal operations. See the Limited Use policy.

4. Processors

Hosting and database: Supabase (United States) and Vercel. Content analysis: AI model providers (Anthropic, Google) which receive the content to analyze without retaining it for training. Subscription confirmations and setup reminder emails: Resend. Payments: Stripe. Fetching the public content to analyze: Apify, which receives only the public links of the posts and operates its platform on servers in the United States.

Audience measurement: Vercel Web Analytics, run by our host. It counts page views and referrers without cookies and without a cross-site identifier, and it does not receive your account, your library or your questions.

Product measurement: PostHog (United States), which receives a short list of steps you reach — first arrival, sign-in, account linked, payment, first sourced answer — with the campaign or link you arrived from, your account identifier, and counts such as how many collections were found. It never receives your email address, your Instagram handle, the name of a collection, a post, a question or an answer. Nothing is sent from your browser to PostHog: these steps are recorded by our own servers, so no PostHog script and no PostHog cookie ever runs on this site.

Advertising measurement: Meta, through the Meta Pixel and Conversions API described in section 2. Meta receives browser page views and server conversion events. See Meta's Privacy Policy for how Meta uses this information and the controls available in your Meta account.

5. How long we keep data

We keep account and library data as long as your account exists. Your content and your account can be deleted on request at contact@ultra-scalability.com; deletion is effective within 30 days. Disconnecting a platform from the app stops all syncing; your existing library remains available until you request deletion. The same address and the same 30-day delay apply to a removal request from a creator whose public content is referenced (see section 2).

6. Asking us about your data

You can ask us what we hold about you, ask us to correct it, or ask us to delete it: write to contact@ultra-scalability.com, from the address on your account. We answer in writing, and deletion is effective within 30 days.

7. Cookies

We use sign-in, measurement and advertising cookies. The Meta Pixel runs on public pages only; conversion events are sent by our servers. Browser cookie controls and tracking blockers can limit browser measurement, but do not stop server conversion events.

• Sign-in: the cookies required to keep you signed in.
• miq_src (acquisition measurement): first-party, set only when you arrive on a Media IQ page through a link we published that carries a ?src= value we recognize. It stores that single word — the name of the campaign or channel — for 90 days, and it is copied onto your account if you later sign up. It is HttpOnly, Secure and SameSite=Lax, so no script and no other site can read it directly. It is not set when you arrive from the browser companion. Campaign information can accompany product measurement events. Blocking or deleting it does not prevent you from using Media IQ. It does not remove attribution already saved to your account.
• miq_aid (product measurement): first-party, set on your first page here. It holds a random value that lets us count one journey once instead of counting the same person twice, for one year. It can be associated with your account when you sign up. It is HttpOnly, Secure and SameSite=Lax, so no script and no other site can read it. Blocking or deleting it changes nothing for you.
• miq_attr (product measurement): first-party, set on your first page here. It holds, for 90 days, where that first visit came from — a campaign name, a category such as « search » or « social », and the kind of page you landed on. This attribution is copied to your account at signup and can accompany product measurement events. It is HttpOnly, Secure and SameSite=Lax, so no script and no other site can read it. Blocking or deleting it changes nothing for you.
• miq_clk (advertising attribution): a first-party, HttpOnly, Secure, SameSite=Lax cookie kept for 90 days. It stores click identifiers (fbclid, ttclid, gclid) and their capture times. These may be copied to your account; the Meta click identifier is used to construct the fbc value sent to Meta.
• _fbp and _fbc (Meta advertising): the Meta Pixel can set these first-party cookies for up to 90 days. They identify a browser and, when you arrive from a Meta ad, an ad click. They are shared with Meta for advertising measurement and matching; they can also be included in server events.

You can block or delete cookies in your browser. Blocking sign-in cookies prevents sign-in; blocking advertising cookies does not prevent you from using Media IQ. For questions or requests about advertising data, contact contact@ultra-scalability.com.