Privacy Policy

Cherry ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share information when you use the Cherry platform — a tool for Instagram creators to manage pages, create content, publish posts, and review insights. By using Cherry, you agree to the collection and use of information as described in this Policy.

We collect the following types of information: Account Information When you register for Cherry, we collect your name, email address, and a hashed password. If you are invited to the platform by an administrator, your account may be pre-created with your email and name. Instagram Account Data (via Meta's Instagram Graph API) When you connect your Instagram account, we access data authorised by you, including: • Your Instagram profile information (username, name, profile picture, bio) • Instagram pages you manage and their settings • Posts and media you have published or are managing through Cherry • Performance insights for your posts and pages (reach, impressions, engagement, follower counts) We access this data only to provide the Service features and do not use it for any other purpose. Usage Data We collect information about how you interact with Cherry, such as pages visited, features used, and actions performed (e.g. templates created, posts published). This is used to improve the Service and for internal analytics. Log Data Our servers automatically record information including your IP address, browser type, operating system, referring URLs, and timestamps when you access the Service.

We use the data we collect to: • Provide, operate, and maintain the Cherry platform. • Allow you to connect your Instagram account and manage your pages and posts. • Display performance insights for your Instagram content. • Send service-related notifications (e.g. account changes, important updates). • Detect and prevent fraudulent or unauthorised use of the Service. • Improve and develop the platform based on usage patterns. • Comply with legal obligations. We do not use your Instagram data for advertising purposes, and we do not build advertising profiles from your content or insights.

We do not sell your personal data to third parties. We may share your data in the following limited circumstances: Meta / Instagram API To provide Instagram-related features, we transmit data to and from Meta's APIs in accordance with Meta's Platform Terms and Data Policy. Service Providers We may engage trusted third-party providers (e.g. cloud hosting, analytics) who process data on our behalf under strict confidentiality agreements. They may only use your data to perform services for Cherry. Legal Requirements We may disclose your information if required to do so by law or in response to a valid legal request (e.g. a court order or government authority), or to protect the rights, property, or safety of Cherry, our users, or others. Business Transfers In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

We retain your personal data for as long as your account is active or as needed to provide the Service. If you request account deletion, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal, regulatory, or fraud-prevention purposes. Instagram data (posts, insights, profile information) obtained through the Meta API is retained only as long as necessary to provide the Service features and is deleted upon account disconnection or account deletion.

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), hashed password storage, and access controls that restrict data access to authorised personnel only. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal data: • Access: Request a copy of the personal data we hold about you. • Correction: Request correction of inaccurate or incomplete data. • Deletion: Request deletion of your personal data (subject to legal retention requirements). • Restriction: Request that we restrict processing of your data in certain circumstances. • Portability: Request a machine-readable copy of your data. • Objection: Object to certain types of processing, such as direct marketing. To exercise any of these rights, please contact us at santosh@twospoon.ai. We will respond to your request within 30 days.

You may disconnect your Instagram account from Cherry at any time through your profile settings or directly through your Instagram / Meta account settings by revoking Cherry's permissions. Upon disconnection, we will cease accessing your Instagram data and will delete any cached Instagram data associated with your account within 30 days.

Cherry uses session cookies and local storage to keep you logged in and maintain your preferences. We do not use third-party tracking cookies or advertising cookies. You can configure your browser to refuse cookies, but this may affect your ability to use certain features of the Service.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the email address associated with your account or by displaying a notice within the Service. We encourage you to review this Policy periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy, please contact us at: santosh@twospoon.ai We take privacy matters seriously and will respond to all inquiries promptly.