Privacy policy

SocialGrid is a tool for scheduling, publishing and measuring Instagram posts. It is run by EndTech Ventures, 138, Devprayagam Colony Phase-2, Jhalwa, Prayagraj 211012, Uttar Pradesh, India ("we", "us"). This policy explains what personal data we collect when you use SocialGrid at https://app.socialgrid.endtechventures.com and this website, why we collect it, who processes it for us, how long we keep it, and how you can have it deleted.

In short: we only collect what we need to run SocialGrid for you. We never sell your data, never use it for advertising, and never post to Instagram unless you told us to. You can disconnect Instagram or delete your data at any time.

1. What we collect

Your SocialGrid account

• Your name, email address and, if you add it, your phone number.
• If you sign in with Google: your name and email address from your Google account. We never see your Google password.
• Your business name, logo, timezone and settings.

Data from Instagram, with your permission

When you connect an Instagram Business or Creator account through Instagram’s official login, Instagram gives us the data the permissions below allow. We never see or store your Instagram password.

• Your Instagram account ID, username, name, profile picture, account type and follower count.
• An access token that lets SocialGrid act for your account. We store it encrypted.
• Your posts, reels and stories: their media, captions, links and publish times, so we can show them on your calendar and measure them.
• Insights about your account and posts, such as reach, views, likes, comments, saves, shares and follower changes.
• Audience summaries Instagram provides in aggregate, such as age ranges, gender, countries and cities. These are totals; they don’t identify individual followers.

Content you add

• Photos and videos you upload, captions, alt text, people and collaborators you tag, and the times you choose.

Billing

• Your plan, billing details you give us for invoices (legal name, GSTIN, address and state) and a record of each payment and invoice.
• Payments are handled by Razorpay (in India) and Creem (outside India). We never receive your card number, UPI PIN or bank login. We receive the payment’s reference, amount and status.

When you contact us

• Your messages and the details you include in them.

Technical data

• Server logs with your IP address, browser type and the pages and actions you request, kept to keep SocialGrid secure and working.
• Error reports when something breaks, so we can fix it.
• Cookies that keep you signed in. We don’t use advertising or tracking cookies. This website loads its font from Google Fonts, which receives your IP address to deliver it.

2. Instagram permissions we ask for, and why

We publish only what you create and schedule in SocialGrid, or ask us to publish now. We never post, comment, follow or message on your behalf without you asking.

3. How we use your data

• To run SocialGrid for you: plan, publish and measure your posts.
• To build your insights, weekly summary emails and monthly reports.
• To send the alerts you need: failed posts, reminders, reconnect warnings.
• To take payments and issue GST invoices.
• To answer your questions and give support.
• To keep SocialGrid secure, prevent abuse and fix problems.
• To meet our legal and tax obligations.

We will never:

• sell, rent or license your data, including data we receive from Instagram;
• use your data for advertising, or share it with advertisers or data brokers;
• use Instagram data to build profiles of people, or to try to identify anyone in it;
• use it for surveillance, or for decisions about anyone’s eligibility for housing, jobs, insurance, credit or other benefits;
• use it to train artificial intelligence models.

4. Who processes your data for us

We use a small number of service providers to run SocialGrid. Each processes your data only to provide its service to us, on our instructions, under a written agreement, and not for its own purposes.

We also share data:

• with people you choose, for example when you send someone a report link, which shows that report to anyone who has the link (write to us if you want a link turned off);
• when the law requires it, such as a valid order from a court or government authority; and
• if SocialGrid is sold or merged, with the new owner, who must keep to this policy. We will tell you before that happens.

Some providers store or process data outside India. Where they do, they protect it under their written agreements with us and as Indian law allows.

5. How long we keep it

• While you use SocialGrid, we keep your data so the service works.
• When you disconnect an Instagram account (in SocialGrid or in Instagram’s settings), we stop collecting its data and delete its access token straight away. We delete the rest of that account’s Instagram data within 30 days.
• When you ask us to delete your data or close your SocialGrid account, we delete your personal data within 30 days.
• Invoices and payment records are kept for as long as Indian tax law requires (currently up to 8 years), and then deleted.
• Backups are overwritten on a rolling basis, so deleted data leaves them within a further 30 days.
• We may keep totals that don’t identify you or anyone else.

6. Your rights

Under India’s Digital Personal Data Protection Act, 2023, you can:

• ask what personal data we hold about you and how we use it;
• ask us to correct or complete it;
• ask us to delete it, or withdraw your consent;
• nominate someone to use these rights for you if you can’t; and
• complain to us, and then to the Data Protection Board of India if you’re not satisfied.

You can change most details yourself in SocialGrid’s settings. For anything else, write to privacy@endtechventures.com from the email address on your account. We reply within 30 days. Withdrawing consent means we can no longer run SocialGrid for that account.

7. Deleting your data

You can remove SocialGrid’s access to Instagram, or ask us to delete everything, at any time. The steps are on our data deletion page.

8. How we protect it

• All traffic to SocialGrid is encrypted (HTTPS).
• Instagram access tokens are encrypted at rest (AES-256-GCM).
• Uploaded files are private and shared only through short-lived links.
• Access to production systems is limited to the people who run SocialGrid.

If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.

9. Children

SocialGrid is for businesses and creators aged 18 or over. We don’t knowingly collect data from anyone under 18. If you think we have, write to us and we will delete it.

10. Changes to this policy

If we change this policy, we will update the date at the top. If the change is significant, we will email you before it takes effect.

11. Grievance officer and contact

For questions or complaints about your data, contact our Grievance Officer:

Grievance Officer, EndTech Ventures
138, Devprayagam Colony Phase-2, Jhalwa, Prayagraj 211012, Uttar Pradesh, India
Email: privacy@endtechventures.com

We acknowledge complaints within 48 hours and resolve them within 30 days.