Privacy Policy

This policy explains how Hubmind LLC handles personal information when you use Instaloops — our websites, apps and services. Hubmind LLC is the controller of that information for the purposes described here.

Communities on Instaloops are run by their own owners. When you join one, its owner also receives information about you and decides how to use it, as an independent controller. This policy does not cover what a community owner does with your information — ask them about their own practices.

Information you give us. Your name, username, email address and password (stored only as a cryptographic hash), your profile photo and bio, and anything else you choose to add to your profile. If you contact support, we keep that correspondence.

Content you create. Posts, comments, messages, courses, uploads, reactions and the communities you join or create.

Payment information. When you buy something, our payment processor collects and holds your card details — we never see or store a full card number. We keep a record of the transaction: amount, date, plan, and the last four digits and card brand.

Information we collect automatically. Device and browser type, IP address, approximate location derived from it, pages viewed, referring URLs, timestamps, and interaction and diagnostic events. See our Cookie Policy for the technologies involved.

Information from third parties. If you sign in with Google or another provider, we receive your name, email address and profile picture from them — never your password. If you connect an integration (for example a calendar or video tool), we receive what you authorize it to share.

We use personal information to:

• provide the Service — create and secure your account, show you communities and content, and deliver what you buy;
• send you service messages such as sign-in links, receipts, security alerts and notifications you have turned on;
• keep the Service safe — detect and investigate fraud, abuse, spam and security incidents, and enforce our Terms of Service;
• understand and improve how the Service is used, and troubleshoot problems;
• send marketing about Instaloops where you have consented or where we are otherwise permitted — you can opt out at any time; and
• meet legal obligations, including tax, accounting and lawful requests.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

If you are in the European Economic Area or the United Kingdom, we rely on these bases:

• Contract — to give you the Service you signed up for and to take payment.
• Legitimate interests — to secure the Service, prevent abuse, understand product usage, and communicate about the product, balanced against your rights.
• Consent — for non-essential cookies and similar technologies, and for marketing where consent is required. You can withdraw consent at any time.
• Legal obligation — to keep records and respond to lawful requests.

We share personal information only in these situations:

• With other members — your profile and the content you post are visible to the audience you chose. Anything you post in a community is visible to that community, and public community pages are visible to anyone on the internet.
• With community owners — owners see the members of their community and their activity in it.
• With service providers who work on our behalf under contract: hosting and database infrastructure, authentication, payment processing, email delivery, error monitoring, analytics and customer support tooling.
• For legal reasons — when we believe disclosure is reasonably necessary to comply with the law or a valid legal request, to enforce our Terms, or to protect the rights, safety or property of anyone.
• In a corporate transaction — if Hubmind LLC is involved in a merger, acquisition or sale of assets, information may transfer, and we will tell you before it becomes subject to a different policy.

We keep personal information for as long as your account is open and for as long afterwards as we need it for the purposes described here. When you delete your account we delete or anonymize your personal information within 30 days, except where we must keep it longer — for example transaction records we are required to retain for tax and accounting, or material we need to resolve a dispute or enforce our agreements. Content you posted into a community may remain visible there where other members’ contributions depend on it; ask us if you want it removed.

We encrypt data in transit with TLS and at rest, store passwords only as salted hashes, restrict internal access to those who need it, and monitor for unusual activity. No service can promise perfect security, so use a strong, unique password and turn on every protection your account offers. If a breach affects your personal information, we will notify you and any regulator as the law requires.

We operate from the United States and use service providers in the United States and elsewhere, so your information may be transferred outside your country. Where we transfer personal information out of the EEA or the UK, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and the UK Addendum, and we assess the protections available in the destination country.

Depending on where you live, you may have the right to access a copy of your personal information, correct it, delete it, restrict or object to how we use it, withdraw consent, and receive it in a portable format. You also have the right not to be discriminated against for exercising these rights.

You can edit your profile and notification settings, and delete your account, from your account settings. For anything else, write to [email protected]. We will verify your request — usually through the email address on your account — and respond within the time the law allows, normally 30 days.

If you are in the EEA or UK and think we have handled your information badly, you may complain to your local supervisory authority. We would appreciate the chance to address it first.

Instaloops is not intended for children under 13, and under 16 in the EEA and UK. We do not knowingly collect personal information from children below those ages. If you believe a child has given us personal information, write to [email protected] and we will delete it.

We will update this policy as the Service changes. When a change is material we will tell you by email or in the Service before it takes effect, and we always update the effective date at the top of this page.

Hubmind LLC is responsible for the personal information described in this policy. Reach us at [email protected] with any privacy question, and mark it “Privacy” so we can route it quickly.