Trust centre

Data we collect

Veillea account (email), public Instagram profiles you choose to monitor, snapshots, derived events, notification preferences, Stripe billing data, consent logs.

Data we do not collect

No Instagram password. No Instagram session. No bypass of CAPTCHA or account restrictions.

Encryption

HTTPS in transit. Secrets stay off the frontend. The Supabase service role key stays on the server.

Retention

Snapshots follow the history length of the plan, then are aggregated or deleted.

Payments

Stripe. Veillea does not store card numbers.

Analytics

PostHog EU, after consent. Monitored usernames are not sent.

Certifications

No ISO 27001 or SOC 2 certification is claimed until a real audit exists.