Privacy policy

1. Who processes your data

The data controller is:

For any question about your data, write to us at that address.

Horvyn LLC is a United States company. The European General Data Protection Regulation (GDPR) applies to us because we offer our service to people located in the European Union, not because we are established there.

2. The data we collect

Your account — when you sign up: your email address, your first and last name, and the name of your brand or company. There is no password: you sign in with a one-time code sent by email, so we store no password at all.

Your social accounts — if you connect an Instagram or Facebook account, we receive that account’s data through Meta’s official API: posts, statistics and profile information, as Meta sends it to us.

What you create in the app — your settings (editorial line, description of your business), your text, and the content generated for your account.

Billing — if you take out a subscription, payment is handled by Stripe. We never store your card number, and we do not keep your invoices: Stripe holds them and sends them to you. We keep only the reference that links your organisation to its subscription at Stripe.

Accounts you watch — if you use the trend feature, we store the public handles you add to a watchlist and, for each report, public information about their recent posts: the account name, the link to the post, and its public counts. We never receive anything private about those accounts; everything comes from what Instagram publishes.

Technical data — the technical logs needed to run and secure the service.

3. Why we use it

To provide the service (performance of a contract): your email is your sign-in identifier; your social account data is what produces the analyses, ideas and drafts the service makes for you.

To secure and improve the service (legitimate interest): technical logs, abuse prevention, fixing errors. To show you what is working in your market (legitimate interest): the public handles you add to a watchlist and the public information about their posts.

To invoice you and keep our accounts (legal obligation).

To write to you — service email only (sign-in, billing, important information about your account). No newsletter without your agreement.

We do not sell your data to anyone, and we do not use it for advertising.

4. Who can access it

The suppliers that make the product run, each one for strictly what it needs: our host, our database, our email delivery service, and the artificial intelligence providers that produce the analyses and drafts, and Stripe, which handles payment.

AI providers receive the context needed for each generation; we do not permit your data to be used to train their models.

When the app analyses a video (a reel), the video file itself is sent to the artificial intelligence provider that analyses it. This is not text alone.

Every Horvyn customer is walled off from every other: another customer never sees your data, and you never see theirs. Nobody else has access to your data unless the law requires it of us.

5. Your Instagram and Facebook data

Your social account data is used only to provide the service on those accounts: analyses, ideas and drafts. It is never used for anything else, and never for another customer.

To stop us collecting an account’s data, remove the Horvyn entry from that account’s authorised apps inside Instagram or Facebook — our Delete your data page explains where, and lists the names that entry can carry. We stop receiving anything from it the moment you do. If you ask us to delete your data, your social account data goes with the rest (see section 8). Write to support@horvyn.com.

6. Transfers outside the European Economic Area

Horvyn LLC is established in the United States, so your data is processed there from the moment you use the service. Some of our suppliers process it there too. Our suppliers make the European Commission’s standard contractual clauses available, and we put them in place with each supplier that processes your data outside the European Economic Area.

7. Cookies

The site and the app use essential cookies only: the ones that keep you signed in. Your language is not stored in a cookie — it is saved on your organisation’s record, so it follows you to any browser. No advertising cookies, no profiling.

One thing on the sign-in and sign-up pages does not come from us: they are protected against bots by a third-party service. It checks that you are a real person. It is not used for advertising and it does not follow you from one site to another.

8. How long we keep it

For as long as your account exists. Closing your account does not by itself delete your data — ask us and we delete it. Our Delete your data page lists what survives and why. Your invoices are kept by Stripe for the period accounting law requires; we keep no copy. Technical logs and backups are kept only as long as they are useful to run and secure the service, and are overwritten on a rolling cycle. The public handles on a watchlist are kept for as long as the customer keeps them on it, and the reports built from them for as long as her account exists.

9. Your rights

Wherever you live, you can ask us for: a copy of the data we hold about you, its correction, its deletion, a restriction on how we process it, its portability, or you can object to a processing activity. These rights apply to all our customers, with no condition on country of residence. And if a customer has added your account to a watchlist, you can ask us for a copy of what we hold about it, for its correction, for its deletion, or you can object to us holding it at all — write to the same address.

Write to support@horvyn.com. We answer.

If you live in the European Union, you can also complain to your country’s data protection authority — the CNIL in France, the APD in Belgium, and the equivalent authority elsewhere. If you live outside the European Union, your country or your state may give you further routes of redress.

10. Security

Your data travels encrypted, access is restricted to the people and systems that need it, and each customer’s data is walled off from every other. No system is perfect: if a data breach affecting you occurred, we would tell you as the law requires.

11. Minors

Horvyn Social is a professional tool for businesses and self-employed people. It is not directed at anyone under 18.

12. Changes to this policy

If this policy changes, we update the date at the top of the page. If the change is significant, we tell you by email before it takes effect.