Privacy Policy

1. Who operates BidInsta

BidInsta is operated by @techie0072 (“BidInsta,” “we,” “us,” or “our”). For information controlled directly by BidInsta, the operator acts as the data controller or equivalent responsible party under applicable privacy law.

2. Information we collect

Information you submit

• Instagram handles you submit and related public profile information used to display the listing.
• Bid amounts, legal-policy acceptance versions and timestamps, checkout references, payment status, and ranking history.
• Messages or requests you send to the operator.
• Publicly visible Instagram profile details, such as profile photo, display name, bio, verification status, follower counts, baseline dates, and synchronization dates.

Information collected automatically

• Leaderboard link clicks, the listing clicked, and event timestamps.
• A random first-party browser identifier, stored in BidInsta’s database only as a one-way hash, plus first-seen and last-seen timestamps used for unique and live visitor counts.
• Aggregated page-view information such as page, referrer, approximate location, browser, operating system, and device type through Vercel Web Analytics.
• Technical and security logs that may include IP address, user agent, route, timestamp, and error information when processed by hosting and infrastructure providers.
• A local browser preference recording whether you selected light or dark mode.

BidInsta does not ask for or store your Instagram password. Card and bank details are collected and processed by Dodo Payments, not stored in BidInsta’s application database.

3. Public information

The service is a public leaderboard. A submitted Instagram handle, rank, paid bid total, tracked clicks, bid activity, and cached public profile context may be visible to anyone and may be indexed, shared, or captured by third parties. Do not submit information you expect to remain confidential.

4. How information is used

• To create and rank listings, process bid increases, and verify payment status.
• To redirect visitors to the correct Instagram profile and measure those outbound clicks.
• To operate, secure, troubleshoot, prevent fraud, enforce the Terms of Service, and comply with law.
• To understand aggregated usage and improve BidInsta’s performance and design.
• To respond to questions, rights requests, disputes, and payment issues.

Depending on the context and applicable law, processing is based on performance of a contract, consent, legitimate interests in operating and securing the service, and compliance with legal obligations.

5. Payments and Dodo Payments

Dodo Payments acts as merchant of record and independently processes customer identity, contact, billing, payment, tax, fraud-prevention, sanctions-screening, chargeback, and compliance information. Its processing is governed by the Dodo Payments Privacy Policy and Buyer Terms.

BidInsta receives limited transaction information needed to apply a successful bid, such as checkout or payment identifiers, amount, currency, metadata, and payment status.

6. Analytics and cookies

BidInsta uses Vercel Web Analytics for aggregated site statistics. Vercel states that Web Analytics does not use third-party cookies, does not associate analytics with an identifiable individual or IP address, and discards its visitor-identification hash after 24 hours. Hosting and security systems may still process technical request data separately.

To display “watching now” and a cumulative unique-visitor count, BidInsta sets an HttpOnly, same-site cookie named bidinsta_visitor containing a random identifier for up to one year. The identifier is hashed before database storage, is not used across other websites, and does not contain your name, email, Instagram handle, or IP address. Presence can remain visible for approximately 75 seconds after a visitor leaves.

BidInsta also uses local storage for your theme preference. Third-party destinations, including Dodo Payments, Instagram, and X, may use their own cookies or similar technologies under their policies.

7. When information is shared

Information may be shared with service providers and independent controllers only as reasonably necessary, including:

• Dodo Payments for checkout, payment, tax, fraud, and merchant-of-record obligations.
• Vercel for hosting, delivery, logs, and Web Analytics.
• Supabase for database and backend infrastructure.
• Meta or Instagram when BidInsta retrieves public profile context or links visitors to a profile.
• Professional advisers, authorities, courts, or counterparties when reasonably necessary for legal compliance, safety, fraud prevention, dispute resolution, or a merger, financing, sale, or transfer of the service.

BidInsta does not sell personal information for money.

8. Retention

Information is retained only as long as reasonably necessary for the purposes described above, including operating public listings, maintaining ranking and payment records, providing cumulative visitor statistics, preventing fraud, resolving disputes, and meeting tax, accounting, payment, or legal obligations. Hashed visitor records are retained for the cumulative unique count; clearing the browser cookie prevents that browser from reusing its existing identifier but does not remove an already aggregated record. Retention periods vary by data type and provider.

Deletion of a listing or account-related information may not delete payment records that must be retained, provider records controlled by third parties, aggregated or de-identified statistics, backups awaiting ordinary deletion, or copies independently made by other internet users.

9. International processing

BidInsta and its providers may process information in countries other than your own. Those countries may have different privacy laws. Where required, providers use contractual or legal safeguards for international transfers.

10. Security

Reasonable technical and organizational measures are used to protect information, including restricted server-side database access and payment processing through a specialist provider. No internet service or storage system can guarantee absolute security, and you use the service with that understanding.

11. Your choices and privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or an appeal, and to complain to a privacy authority. Rights are subject to applicable exceptions, identity verification, and records we must retain.

Send a request through @techie0072 on X. Include the relevant Instagram handle and enough information to verify the request, but never send passwords or full payment-card details. Requests concerning payment data controlled by Dodo Payments should be directed to Dodo Payments.

12. Children

BidInsta is not directed to children under 18, and users may not place bids unless they are at least 18 and legally capable of contracting. If you believe a child supplied personal information, contact the operator.

13. Changes to this Policy

We may update this Policy as the service, providers, or laws change. The effective date at the top identifies the current version. Material changes may be highlighted on the service or require renewed acknowledgement.