No password, no token, no app connection
We work from your public username. There is no OAuth connection to revoke and no session of yours for us to lose, because we never hold one.
Security
The smallest amount of data that works.
Most of this market asks for your password and stores a session inside your account. We ask for a public username and an email address, which means the worst case here is far smaller than the worst case there.
What we hold about you
- Your password
- never asked
- Access to your account
- none
- Card numbers
- never stored
- Your IP address
- hashed only
- Deletion on request
- same week
The rules
Four things that do not change
Nothing runs inside your account
No auto-follow, no auto-like, no DMs, no scheduled posting. Ganicly delivers real followers from its own base, matched to your niche, countries and accounts by its own AI technology, using only your public username.
Sign-in: a one-time link or your own password
Either a one-time link, valid twenty minutes, usable once and rate-limited per customer, or a password you set yourself, never stored in readable form. You can sign out of every device from your account. This is your Ganicly password, never your Instagram or TikTok one.
Leaving takes your data with it
Cancel is one click. Ask us to delete and everything goes except the invoices accounting law requires us to keep.
Lifecycle
What happens to a piece of data
- CollectedEmail at sign-up, username and targets at setup, public profile readings daily
- UsedTo run the plan, draw the dashboard and send the report you asked for
- SharedNever sold. Passed on only where running your plan requires it
- KeptWhile the subscription runs and 24 months after, unless you ask sooner
- DeletedOn request, within the same week, except accounting records
Protection
How your data is kept safe
Encrypted on the way and at rest
Every page and every request runs over HTTPS. Stored data is encrypted.
Access is limited
Only the people who run the service can reach customer data, and only to answer you or to run your plan.
Never sold, never used for ads
Your email and your profile readings are not sold, rented or shared for advertising.
Email only for your account
Sign-in links, receipts and the report you asked for. Marketing only with your consent, and one click ends it.
Reporting
If you find a hole in this
Write to us with what you found and how to reproduce it. We answer within 24 hours, we will not threaten anyone who reports in good faith, and we will tell you when it is fixed. We do not run a paid bounty; we do credit people who report, if they want that.
If something goes wrong at our end and your data is affected, you hear it from us with what happened and what we did, not from a status page footnote weeks later.
Read the privacy policy in full.
The formal version of this page: what is collected, why, and the rights you have over it.