Privacy Policy
1. Introduction
This Privacy Policy outlines how Instama ("we", "us", "our") processes your personal data in accordance with the General Data Protection Regulation (GDPR).
2. Data Controller
Instama
Bakenesserstraat 12
2011JJ Haarlem, The Netherlands
Email: hello@instama.co
Instama acts as the Data Controller for your account-related information and as the Data Processor for any client content you upload to the platform.
3. Data We Collect
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Name, email | Account creation, communication | Contract |
| Usage data | Service improvement, support | Legitimate interest |
| Payment information | Billing | Contract |
| Uploaded, created and generated content | Delivering platform services | Contract |
| Feedback/support data | Improving platform experience | Legitimate interest |
We do not collect or process sensitive personal data unless explicitly provided and required for service delivery.
4. Your GDPR Rights
You have the right to:
- Access, correct, or delete your personal data
- Restrict or object to data processing
- Request data portability
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, contact us at hello@instama.co.
5. Data Sharing
We do not sell your personal data. Data is only shared with subprocessors necessary to provide our services, under GDPR-compliant agreements, or if required by law.
6. International Data Transfers
Your data is not transferred outside the European Economic Area (EEA) unless adequate safeguards are in place that comply with GDPR requirements.
7. Data Retention
We retain data for as long as required by applicable laws or service agreements. Client data is deleted within 30 days after account termination unless otherwise required or contractually agreed.
8. Cookies
We use essential cookies only, required for platform functionality. We do not use third-party advertising or tracking cookies.
9. Security
We implement appropriate security measures, including:
- Encryption for data in transit
- Strict access and permission controls
- Regular security audits and reviews
10. Subprocessors
We rely on GDPR-compliant service providers such as hosting providers and AI-related APIs. A complete list of subprocessors is available upon request.
11. Policy Updates
We may update this policy periodically. Material changes will be communicated clearly and in advance where appropriate.
12. Contact
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Instama
Bakenesserstraat 12
2011JJ Haarlem, The Netherlands
Email: hello@instama.co