KLUG Privacy Policy
Effective date: 25 September 2026 Operated by: Soundcheck Insights LLC, Miami, Florida, USA ("Soundcheck", "we") Contact: info@soundcheckinsights.com
1. What KLUG is
KLUG is a self-service product that analyses a business's own Instagram content and the public comments left on it, and produces findings about how the audience is reacting. It is operated by Soundcheck Insights LLC. KLUG is not affiliated with, endorsed by, or operated by Meta Platforms, Inc. Instagram and Facebook are trademarks of Meta Platforms, Inc.
KLUG is for businesses. You must be at least 18 and authorised to act for the Instagram professional account you connect.
2. What we collect, and where it comes from
From Instagram, with your authorisation
When you connect an Instagram professional account through Facebook Login, we access the following through Meta's official API, under the permissions you approve on the consent screen:
- Account basics: your Instagram account id, username, display name, biography, website, profile picture, follower and following counts, and post count.
- Your posts: captions, media type, timestamps, permalinks, engagement counts (likes, comments, saves, shares, reach), and the images of the posts we analyse. We keep a small thumbnail of the first image of each analysed post; we do not keep original image or video files.
- Comments on your posts: the comment text, timestamp and like count, including replies. We also receive the commenter's Instagram id, which we immediately convert into a one-way hash used only to detect duplicates and the account's own replies. We do not store commenter usernames or names, do not build profiles of people who comment, and do not contact them.
- Aggregate audience insights: statistics about your followers as a group — the share of followers by country, city, age range and gender, your reach, and new followers per day — as Instagram provides them. These are aggregates; they do not identify any individual follower.
- Posting history: the dates, formats and engagement counts of your recent posts, so we can describe how often and when you post.
The permissions we request are email, public_profile, pages_show_list, pages_read_engagement, read_insights, instagram_basic, instagram_manage_comments and instagram_manage_insights. We use instagram_manage_comments only to read comments; we never post, reply, hide or delete anything, and we do not request permission to publish content or send messages.
From you directly
- Your email address, from your Facebook profile or typed on our landing page, so we can deliver your results.
- If you purchase a product: your name and billing details, which are collected and processed by Stripe. We never see or store your card number.
- Anything you type into KLUG (for example, whether a Snapshot was useful).
Automatically
- Standard technical data: IP address, browser type, pages visited and timestamps, used for security, abuse prevention and to understand how KLUG is used.
- If you arrived through a link from one of Soundcheck's partner agencies, the identifier of that agency is recorded with your account (see section 5).
3. How we use it
- To produce your Snapshot, Audit or monthly follow-up: we analyse your posts and comments to classify audience reactions, detect patterns and generate findings and recommendations.
- To send you your results and service messages.
- To process payments and manage subscriptions.
- To operate, secure and improve KLUG, including measuring which findings customers rate as useful.
- To build industry benchmarks. We intend to combine aggregated statistics from the accounts connected to KLUG — for example follower band, posting frequency, format mix, engagement rates and the mix of audience reactions — so that your results can be compared with accounts like yours. A benchmark is a single statistic, such as a median, computed across a group of accounts. We publish one only when the group contains at least twelve different accounts, and a benchmark never contains an account id, a username, a post, a comment, an image, or the exact number of accounts behind it. No other customer ever sees your account, your posts, your comments or your images. We are not showing benchmarks yet: not enough accounts have connected for any group to reach twelve.
We do not: sell your data; use it for advertising; use it to build or train models offered to third parties; show your account's data to other customers; or use it for any purpose other than providing and improving KLUG, including the benchmarks described above.
4. Automated analysis and AI providers
KLUG's analysis is automated. Your posts and comments are processed by AI models operated by Anthropic and OpenAI, acting as our subprocessors, to describe creative content, classify reactions and check findings. Under those providers' business terms, your content is not used to train their models. Anthropic does not retain our API traffic; OpenAI may retain API inputs for up to 30 days for abuse monitoring, after which they are deleted. We send OpenAI only summarised findings and short comment excerpts for verification — never your full comment history.
No human at Soundcheck reviews your individual results as part of delivering the product. Soundcheck staff may review a sample of outputs to measure and improve accuracy; this review is internal, logged and never shared.
5. Who we share it with
- Service providers (subprocessors): Vercel (hosting and file storage), Neon (database), Inngest (background processing), Resend (email delivery), Stripe (payments), Clerk (sign-in for your account area), Anthropic and OpenAI (AI analysis). Each is bound by contract to process data only on our instructions.
- Other customers, in aggregate only. Once enough accounts of a similar size have connected, industry benchmarks built across at least twelve accounts (section 3) will appear in other customers' results, as they will in yours. Nothing that identifies your account, and none of your posts, comments or images, is ever shown to another customer. This is not happening today, because no group has reached twelve accounts.
- Your referring agency, if any. If you came to KLUG through a partner agency's link, that agency can see that your account exists, its status (for example, whether a Snapshot was delivered or an Audit purchased) and your Snapshot results, so they can follow up with you. They cannot access your Instagram account or token. If you did not arrive through an agency link, no agency can see your data.
- Legal: to a public authority only in response to valid legal process (a subpoena, court order, warrant or equivalent), after we have reviewed the request for legality. We disclose the minimum the request lawfully requires, challenge requests we consider unlawful or overbroad, keep a written record of every request and our response, and notify you beforehand where the law allows. We may also disclose data where necessary to protect the rights, safety or property of Soundcheck, our customers or the public.
- Business transfers: if Soundcheck is involved in a merger, acquisition or sale of assets, your data may transfer with it, under this policy.
We do not share your data with Meta beyond the API calls needed to retrieve it.
6. How long we keep it
| Data | Retained |
|---|---|
| Instagram access token — free Snapshot | 30 days after you connect, then deleted. Reconnecting later takes one click |
| Instagram access token — paid Audit or monthly follow-up | For as long as your subscription or order is active; deleted when you disconnect |
| Free Snapshot results and the data behind them | 12 months, unless you delete them sooner |
| Paid Audit data (posts, comments, analysis, findings, reports) | For the life of your account; deleted when you close it or request deletion |
| Email address (Snapshot only, never purchased) | 12 months |
| Payment records | As required by tax and accounting law, held by Stripe |
| Deletion records | A minimal record that a deletion occurred (date, confirmation code), kept to demonstrate compliance |
| Industry benchmark statistics | Kept for as long as KLUG operates. One row is a period, a size band, a metric, a median across at least twelve different accounts, and a banded count — never an exact one. It holds no account id, username, post, comment, image or commenter hash |
7. How to delete your data
Any of these works, and each triggers the same complete deletion:
- On your results page: use "Disconnect and delete my data". No login required.
- In Facebook or Instagram: remove KLUG from your connected apps and business integrations. Meta notifies us and we delete your data.
- Data deletion request through Meta, which Meta forwards to us. You receive a confirmation code and a status link.
- Email info@soundcheckinsights.com.
Deletion removes your token, your posts and comments as retrieved from Instagram, every analysis derived from them, stored thumbnails and report files. It is not reversible. A report you downloaded before deleting stays with you; the download link stops working. Industry benchmark statistics that already included your account (section 3) are not removed. A published benchmark is never recomputed, so removing your contribution is not possible even for us — and it is not necessary: each one is a median across at least twelve accounts and holds nothing that could be traced to yours.
8. Security
Instagram access tokens are encrypted at rest with per-record keys under a master key held outside the database. All traffic is encrypted in transit. Access to production data is limited to personnel who need it and is logged. Payment card data is handled entirely by Stripe. Soundcheck maintains an incident response plan and will notify affected customers within 72 hours of confirming a breach affecting their data.
9. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. Contact info@soundcheckinsights.com; we respond within 30 days. Soundcheck is based in the United States, and your data is processed there.
Comments on your posts belong to the people who wrote them. If you are a commenter and want to know whether your comment text is held by KLUG, contact us — we can search by post, but we do not store usernames, so we cannot look you up by name.
10. Children
KLUG is a business product for users 18 and older. We do not knowingly collect data from anyone under 18.
11. Changes
We will post changes here with a new effective date, and for material changes will notify connected accounts by email. Continued use after the effective date means you accept the updated policy.