Instama Privacy Policy

Last Updated: June 5, 2024

1. Introduction

This Privacy Policy outlines how Instama ("we", "us", "our") processes your personal data in accordance with the General Data Protection Regulation (GDPR).

2. Data Controller

Instama
Bakenesserstraat 12
2011JJ Haarlem, The Netherlands
Email: hello@instama.co

Instama acts as the Data Controller for your account-related information and as the Data Processor for any client content you upload to the platform.

3. Data We Collect

Data Type	Purpose	Legal Basis
Name, email	Account creation, communication	Contract
Usage data	Service improvement, support	Legitimate interest
Payment information	Billing	Contract
Uploaded, created and generated content	Delivering platform services	Contract
Feedback/support data	Improving platform experience	Legitimate interest

We do not collect or process sensitive personal data unless explicitly provided and required for service delivery.

4. Your GDPR Rights

You have the right to:

Access, correct, or delete your personal data
Restrict or object to data processing
Request data portability
Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at hello@instama.co.

5. Data Sharing

We do not sell your personal data. Data is only shared with subprocessors necessary to provide our services, under GDPR-compliant agreements, or if required by law.

6. International Data Transfers

Your data is not transferred outside the European Economic Area (EEA) unless adequate safeguards are in place that comply with GDPR requirements.

7. Data Retention

We retain data for as long as required by applicable laws or service agreements. Client data is deleted within 30 days after account termination unless otherwise required or contractually agreed.

8. Cookies

We use essential cookies only, required for platform functionality. We do not use third-party advertising or tracking cookies.

9. Security

We implement appropriate security measures, including:

Encryption for data in transit
Strict access and permission controls
Regular security audits and reviews

10. Subprocessors

We rely on GDPR-compliant service providers such as hosting providers and AI-related APIs. A complete list of subprocessors is available upon request.

11. Policy Updates

We may update this policy periodically. Material changes will be communicated clearly and in advance where appropriate.

12. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Instama
Bakenesserstraat 12
2011JJ Haarlem, The Netherlands
Email: hello@instama.co