WaveScope
Privacy Policy
Effective date: October 6, 2026
This policy explains how Wave Scope ("we", "us") collects, uses, stores and deletes data when providing WaveScope (the "Service"). The Service is a marketing analytics tool used internally by our team and is not open for public sign-up. If this English version differs from the Traditional Chinese version, the Traditional Chinese version prevails.
1. Data we collect
| Source | Data |
|---|---|
| Public Instagram business data (Meta Business Discovery API) | Public username, follower count and media count of Instagram professional (business or creator) accounts, and the URL, publish time, like count, comment count and Reels view count of their public posts. |
| Creator-authorized data (Instagram Insights) | Collected only after a creator opens our authorization link and grants consent: post insights such as reach, views, saves and shares, and aggregated follower demographics by age, gender and location. Demographics are aggregates and never identify individual followers. |
| Public hashtag posts (Meta Hashtag Search API) | URL, caption, publish time, like count and comment count of public posts using specific hashtags. This API does not return the author's username, and we do not collect it by other means. |
| Manual input by our team | Collaboration fees (cash, vouchers and product samples), agreed deliverables, quotes, and dashboard figures shared with us by creators (such as shares, saves and Story views). URLs and performance figures of Threads posts are also entered manually only. |
| Dashboard screenshots provided by creators | Screenshots of Instagram or Threads dashboards that creators choose to send us. They serve as evidence for collaboration performance figures and are used to pre-fill the manual input above. Screenshots may include follower demographics (aggregated age, gender and location), but never identify individual followers. |
We only collect data through official Meta APIs. We do not use scrapers or any method that circumvents platform protections. We never collect or store creators' Instagram passwords.
2. How we use data
Data is used only to evaluate the performance of creator collaborations, compare and select creators, choose content worth promoting, and observe changes in topic volume. We do not sell, rent or transfer any data obtained from Meta platforms, and we do not use it for building ad audiences, profiling individuals, or any purpose unrelated to the above.
3. Storage and security
- Access tokens granted by creators are stored encrypted and used only to retrieve data within the scope the creator authorized.
- The Service is accessed only over HTTPS; passwords are stored as hashes, and access is limited to authorized team members.
- Public hashtag posts are kept for 180 days; captions are cleared after 90 days.
- For creator accounts we stop observing, regular (non-collaboration) post data is deleted one year after observation ends.
- Performance data of collaboration posts is kept with the campaign record for reporting and future evaluation.
- Creator dashboard screenshots are stored on the Service's host and are visible only to signed-in team members. They are deleted together with the manual entry or collaboration post they belong to; screenshots not attached to any manual entry are deleted automatically after 30 days.
4. Revoking authorization and deleting data
Creators who have authorized the Service can revoke authorization and request deletion at any time, in either of these ways:
- Remove the Service under "Settings → Apps and websites" in Instagram or Facebook. When we receive Meta's data deletion request, we delete your access token, Insights data and follower demographics.
- Email [email protected] with your Instagram username. We will complete the deletion and reply within 30 days after verifying your identity.
You may also email us to have the dashboard screenshots you provided deleted; we will delete them and reply within 30 days.
After authorization is revoked, we may still keep public data obtained through public APIs (such as like counts on public posts), since anyone can view it. You may also email us to have that data deleted.
5. Third parties
Our data source is Meta Platforms, Inc.; see the Instagram Privacy Policy for how Meta handles data.
- Cloud hosting: data is stored on Amazon Web Services (AWS Lightsail, Tokyo region).
- Screenshot recognition: when automatic recognition is enabled, creator dashboard screenshots are sent to Anthropic's Claude API solely to read the figures and pre-fill the form; a team member must check the pre-filled figures before they are saved. Data obtained from Meta APIs is never sent to Anthropic.
Apart from these service providers and as required by law, we do not share data with any other third party.
6. Changes to this policy
When this policy changes, we will update the effective date on this page. For material changes, we will notify creators who have authorized the Service.
7. Contact
Wave Scope
Email: [email protected]