Privacy Policy

MyFollowers.ai is a service where content creators build a media kit documented with numbers from their own social media accounts. Vélo Club AS (Norway) is the data controller. Contact: hello@myfollowers.ai.

What we collect and why

Account

Your e-mail address, used to log you in with a one-time code and to send transactional e-mail (login codes, inquiries from brands, sync errors). We do not store passwords. A session cookie keeps you logged in.

Profile and media kit

Name, bio, profile picture, social media handles, prices and the numbers you choose to publish. The media kit is private until you publish it or share a link to it.

Screenshots you upload

Screenshots from Instagram Insights, TikTok Studio, YouTube Studio or LinkedIn are stored in our database and read by an AI model to extract the numbers. Each screenshot is sent to Anthropic (Claude API) for this reading. Anthropic does not use API data to train its models. We also run integrity checks on the images to detect edited or fabricated screenshots. You approve every number before it is published.

Connected accounts (Instagram, TikTok)

If you connect an account, you authorise us through the platform's own consent screen. We request read-only access to your own account statistics: follower count, views, reach, likes, comments, shares, profile visits and follower demographics (age, gender, country, city). We never access your content, messages, comments or other users, and we cannot post or change anything.

• Instagram: Instagram API with Instagram Login, permissions instagram_business_basic and instagram_business_manage_insights.
• TikTok: TikTok Accounts API, permissions user.info.basic, user.info.profile, user.info.stats, user.insights and user.account.type.

Access tokens are encrypted at rest (AES-256-GCM) and are used once a night to fetch the last 30 days of statistics. Only aggregated account-level numbers are stored, never individual posts or follower identities. You can disconnect at any time from "Mine tall"; the token is then revoked and deleted immediately. You can also revoke access from Instagram (Settings → Apps and websites) or the TikTok app. Numbers already fetched remain in your history as documented data points until you delete them or your account.

Share links

When you share your media kit with a link, we count how many times the link is opened and when. We do not store IP addresses or identify the viewer.

Inquiries from brands

A brand that contacts you through your media kit gives us their name, e-mail, company and message. This is stored so you can read and answer it, and is forwarded to your e-mail. To stop spam, a keyed hash of the IP address of the sender is stored with the inquiry. The address itself is not stored.

Sign-up and calculator

If you leave your e-mail on the front page or in the price calculator, we store it together with the handles and comment you entered, to create your account and follow up.

Technical data

We use Vercel Web Analytics, which counts page views without cookies and without identifying you. Errors in the app are logged with the page, the error message and, if you are logged in, your user ID, so we can fix them.

Legal basis

Processing is based on the agreement with you (GDPR art. 6(1)(b)) for account, media kit, uploads and connected accounts; on your consent (art. 6(1)(a)) for connected platform accounts, which you can withdraw at any time; and on our legitimate interest (art. 6(1)(f)) for error logging, analytics and abuse prevention.

Who we share data with

We do not sell personal data. We use these processors:

• Supabase (database, file storage and authentication), hosted in the EU (Stockholm).
• Vercel (hosting and analytics).
• Anthropic (AI reading of screenshots).
• Resend (transactional e-mail).
• Meta and TikTok as data sources when you connect an account, under their own terms.

Where a processor is outside the EEA, transfers are covered by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

Retention

Your data is kept as long as you have an account. Tokens for connected accounts are deleted when you disconnect. When you delete your account, profile, screenshots, fetched statistics, share links and inquiries are deleted within 30 days. Error logs are kept for up to 90 days. E-mails for sign-up are deleted if no account is created within 12 months.

Your rights

You can ask for access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interest. Write to hello@myfollowers.ai. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).

Data deletion for connected accounts

To have everything we fetched from Instagram or TikTok deleted, disconnect the account and e-mail us, or use the data deletion request in the Instagram app. Deletion is confirmed by e-mail.

Changes

We update this page when the service changes. Material changes are announced by e-mail or in the app.