Who is responsible
We are a company based in the United Arab Emirates, under the law of the United Arab Emirates. We are responsible for deciding how your personal data is used for Ganicly. Use the privacy contact address in the Contact section below for privacy questions and requests.
What we collect from you
You provide your email, public username, targeting answers and support messages. Your name is optional on contact and cancellation forms. We also collect the usernames you enter into our free tools and record your marketing-email consent choices. Payment data is handled by the payment provider. We receive only payment references, never card numbers.
Data collected automatically
We collect sign-in data for email-link sign-in and optional Google sign-in. Signing in with Google can create a new customer account for the email address Google confirms. For rate limits and abuse prevention, we store identifiers such as your IP address only as keyed hashes, computed with a secret key, never the full address. The browser storage and analytics used on the site are described below.
Data from public sources
We obtain public profile data through a public social data provider. While your plan runs, we collect daily public statistics about your profile and its public posts. Our free tools fetch public profile data for the usernames you enter. This information comes from public sources, not from access to your account. We never ask for your Instagram or TikTok password or log in to your account.
Why we use data and our legal bases
We use data to run and report on your plan, send receipts and the weekly email report, check the growth guarantee, answer support messages, maintain security and prevent abuse. Our legal basis for subscription, account and support processing is performance of our contract with you. Our free tools use the usernames you enter to fetch public profile data. We rely on legitimate interests to provide those tools, protect security, prevent abuse and use analytics to measure use and improve the site. We keep required accounting and tax records to meet our legal obligations. Product emails are based on consent, which is off by default and can be changed in your profile. Browser tracking is addressed below.
Information needed for your plan
Your email address and public account handle are required to perform the subscription contract. Without them, we cannot provide the service. Payment data is handled by the payment provider. Your name on contact and cancellation forms is optional. Consent to product emails is also optional and is off by default.
Analytics
Google Analytics 4 runs on all pages to measure how the site is used and help us improve it. When we run advertising campaigns, the Meta pixel and the TikTok pixel also run on all pages. They record page views and steps such as running a check, leaving your email address or requesting activation, so we can see which ads lead to sign-ups, and Meta and TikTok receive these events with technical data from your browser. Our legal basis is our legitimate interest in understanding use, measuring our advertising and improving the site. The banner provides notice of this processing; it is not a consent mechanism. You can object to processing based on legitimate interests using the privacy contact address in the Contact section below.
Do Not Track and Global Privacy Control
Do Not Track and Global Privacy Control are browser signals about privacy preferences. We honour these signals where the law requires it; otherwise, we do not process them. Marketing-email consent can be changed in your profile. The banner is a tracking notice, not a consent control.
Service providers
Personal data may be handled by providers in these categories: hosting, database, payments, email delivery, sign-in, analytics, advertising measurement and public social data. The public social data provider reads public profile data. We use Google Analytics 4 and, during advertising campaigns, the Meta and TikTok pixels as described above. No AI service processes customer data in the product.
International transfers
We are based in the United Arab Emirates. Your data is processed in the United States for hosting and database services, and in other countries where our service providers operate. For international transfers, we use appropriate safeguards such as the EU standard contractual clauses. Where EU or UK data-protection law applies, transfers must meet its requirements. Use the privacy contact address in the Contact section below to ask about these safeguards or request a copy.
Retention and deletion
We keep data as long as needed for the purposes described in this policy or as long as the law requires. Send deletion requests using the privacy contact address in the Contact section below.
Security
We protect personal data with encryption in transit, access limited to authorised staff, role-based and logged access, and regular backups. We never ask for your Instagram or TikTok password and never log in to your account. We do not collect card numbers, and IP addresses are stored only as keyed hashes.
Minors
You must be at least 18 to use or buy the service. The service is not directed at anyone under 18, and we do not knowingly collect their personal data. We delete minors' personal data when we learn of it. If you believe a minor's personal data has been provided, contact us using the privacy contact address in the Contact section below.
Automated decisions
The growth guarantee is checked automatically. If our readings are missing, a person reviews the result and the doubt goes to the customer. We do not make solely automated decisions that have legal or similarly significant effects on you.
Your privacy rights
Where EU or UK data-protection law applies, you can request access to and a copy of your data, correction, deletion, restriction and, where applicable, data portability. If a legal basis identified in this policy is legitimate interests, you can object to processing on that basis. You can also object to direct marketing. You can withdraw consent without affecting the lawfulness of earlier processing. These rights have legal conditions and exceptions, including required accounting records. Use the Contact section below, or change marketing-email consent in your profile. Nothing in this policy limits rights under the mandatory law of your country of residence.
Complaints to a data-protection authority
Where EU data-protection law applies, you may complain to a data-protection authority, particularly in the EU country where you habitually live or work, or where you believe an infringement occurred. Where UK data-protection law applies, you may complain to the UK data-protection authority. You do not have to contact us first. Contact details are available from the relevant authority.
Changes to this policy
If we update this policy, we publish the revised policy on this page and change the last updated date at the top. We do not announce policy updates by email. Updates must comply with applicable data-protection law and cannot remove rights you have under the mandatory law of your country of residence.
Contact
For privacy questions, deletion requests or other privacy rights, email us at the support address shown at the bottom of this page, which is also our privacy contact address. Please explain what you need. A person answers support emails within 24 hours. This is a support response, not a promise to complete every privacy request within that time. Privacy requests must be handled within the deadlines required by applicable law.