This Privacy Policy describes how Sanry collects, uses, shares, and protects information when you use our AI creative and marketing service (the “Service”). It applies to our website, app, and the features within them. By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.
1. Information we collect
We collect information that you provide directly, information generated as you use the Service, and information from third parties you connect (such as Instagram). We do not intentionally collect sensitive categories of personal data (for example, health, religion, or precise location).
| Category | What it includes |
|---|---|
| Account | Your email address, and (if you sign in with Google or provide them) your name and profile picture. |
| Content you provide | Product photos, logos, brand colors, fonts, documents, and other assets you upload to your products or brand library, plus the business details you enter (such as product names and descriptions). |
| Generated content | The images and copy the Service produces for you, the prompts and briefs used to create them, and your chat conversations with the assistant. |
| Instagram data | If you connect an Instagram professional account: your Instagram user ID, username, an access token, your media, post engagement and reach metrics, and aggregated audience demographics. |
| Competitor research | Public information about competitor accounts you choose to track. |
| Usage and billing | Your credit balance and a record of credits consumed by AI actions. |
| Technical data | Information collected automatically when you use the Service, such as your IP address, device and browser type, and basic server logs of the actions you take. We use this to operate, secure, and debug the Service. |
2. How we use information
We use the information we collect to:
- Provide, operate, and maintain the Service, including generating, editing, and organizing your content.
- Publish content to your connected Instagram account at your request and show you analytics about how it performs.
- Improve the suggestions the Service makes for your brand, based on your approvals, edits, and performance signals.
- Communicate with you about your account, including service and security notices.
- Maintain the security and integrity of the Service, prevent fraud and abuse, and operate billing and credits.
- Comply with our legal obligations and enforce our terms.
3. How we share information
We do not sell your personal information. We share it only in these circumstances:
- With the service providers that help us run the Service, listed on our Subprocessors page. They may process your data only on our instructions and to provide their service.
- At your direction — for example, when you publish a post to your connected Instagram account.
- To comply with the law, respond to lawful requests, or protect the rights, safety, and property of you, us, or others.
- In connection with a merger, acquisition, or sale of assets, in which case we will continue to protect your information and notify you of any change in control or use.
4. Connected accounts
If you connect a social account such as Instagram, we access your profile and media, publish the posts you create at your request, and read engagement and reach metrics so we can show you analytics.
We store any access token securely, use it only to act on your behalf, and never share it with or show it to other users. You can disconnect a connected account at any time in Settings, which deletes the stored token. Our use of information received from Meta complies with the Meta Platform Terms and Developer Policies.
5. Cookies and similar technologies
We store small files (cookies) and use similar technologies, such as your browser’s local storage, on your device. We use them only for the following purposes:
- Strictly necessary — to run the Service, keep you signed in, and keep your account secure. The Service does not work without these.
- Functional — to remember your preferences, such as your language, theme, and layout, so the Service works the way you left it.
We do not use cookies for advertising or marketing, and we do not use third-party tracking or analytics cookies. You can block or delete cookies in your browser settings; because the cookies above are necessary or functional, doing so may sign you out or reset your preferences.
6. Data retention
We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete your personal data and stored content (see the next section). Residual copies may remain in encrypted backups for a short period before they are overwritten in the normal backup cycle. We may retain limited records for longer where required to comply with the law, resolve disputes, or enforce our agreements.
7. Your rights
You can access and update much of your information directly in the app, and disconnect any connected account at any time. Depending on where you live, you may also have the right to request access to, correction of, or deletion of your personal data, and to object to or restrict certain processing.
You can delete your account and all associated data at any time from your account settings, or by contacting us at [CONTACT_EMAIL]. We action verified deletion requests within 30 days.
8. Security
We use reasonable technical and organizational measures to protect your information. These include encryption of data in transit, access controls, per-user data isolation so accounts cannot read each other’s data, and storing sensitive credentials (such as your Instagram access token) in restricted, server-only storage that is never exposed to the browser. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
9. Children
The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their information. If you believe a child has provided us personal data, contact us and we will delete it.
10. International users
We operate the Service from, and rely on providers located in, various countries, including the United States. By using the Service, you understand that your information may be transferred to and processed in locations that may have different data-protection rules than your own.
11. Third-party links and services
The Service may link to, or integrate with, third-party websites and services that we do not control. This policy does not cover their practices; please review their own privacy policies.
12. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the “Last updated” date at the top of this page, and where appropriate we will provide additional notice.
13. Complaints
If you have a concern about how we handle your data, please contact us first so we can try to resolve it. Depending on where you live, you may also have the right to lodge a complaint with your local data-protection authority.
14. Contact
For any privacy question or request, contact us at [CONTACT_EMAIL].
This document is provided for transparency and is not legal advice. Please have it reviewed by qualified counsel before relying on it.