Social Media Loyalty
Effective Date: February 11, 2026 | Version 1.0
Social Media Loyalty (“SML,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect information when you use our platform at campaign.socialmedialoyalty.com.
Social Media Loyalty (SML) is a data analytics marketplace headquartered in the State of Texas, United States. We provide engagement analytics tools to business clients (“Account Owners”) who manage Instagram marketing campaigns.
Important Distinction:
SML operates as a Data Processor. The Account Owner (brand/business) is the Data Controller and bears full legal responsibility for data collection activities. SML does not directly scrape or extract data from Instagram — all data retrieval is performed by Third-Party APIs at the Account Owner's direction and responsibility.
This Privacy Policy addresses three categories of individuals:
| Category | Who They Are | Data Relationship |
|---|---|---|
| Account Owner | Brand manager, campaign owner, or business that registers on SML | Provides account data directly; acts as Data Controller |
| End User | Instagram user who interacts with campaign posts (likes, comments, stories) | Public engagement data processed; identity protected by default |
| Site Visitor | Anyone who visits the SML website (public pages, leaderboards, counter pages) | Standard web analytics and cookies (with consent) |
Note: This data is collected by Third-Party APIs at the Account Owner's request and responsibility. SML does not directly scrape, crawl, or extract any data from Instagram.
joh***23)| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide analytics services to Account Owners | End User engagement data | Contractual necessity / Legitimate interest |
| Generate leaderboards and rankings | Engagement scores, usernames (masked) | Contractual necessity |
| Account authentication and security | Login credentials, IP address, device info | Legitimate interest (security) |
| Send system emails (verification, reports, OTP) | Email address | Contractual necessity |
| Website analytics (with consent) | Page views, device info | Consent |
| Fraud prevention and abuse detection | Login attempts, IP addresses | Legitimate interest (security) |
We do not sell, rent, or trade any personal data to third parties for marketing purposes.
joh***23. For short usernames (<8 characters): mik***.These protections are applied across all viewing contexts:
SML does NOT directly scrape, crawl, or extract data from Instagram.
All data retrieval is performed through Third-Party APIs at the Account Owner's express direction and under the Account Owner's full legal responsibility. The Account Owner acknowledges awareness of all applicable laws and Meta/Instagram Terms of Service.
SML's role is limited to:
We may share information in the following circumstances:
| Recipient | Data Shared | Purpose |
|---|---|---|
| Account Owner | End User engagement data (masked/blurred) | Campaign analytics |
| Google Analytics | Page views, device info (anonymized) | Website analytics (with consent) |
| Email service provider | Email address | System notifications |
| Cloud storage provider | Profile pictures, media files | File storage and delivery |
| Law enforcement | As required by law | Legal obligation |
We do not sell personal data. We do not share End User data with any party other than the Account Owner who manages the relevant campaign.
These are required for the platform to function and cannot be disabled:
We use Google Analytics (GA4, Measurement ID: G-F5QXF6X9FS) to understand how the platform is used. These cookies are only loaded with your consent:
_ga — Distinguishes unique visitors (expires: 2 years)_gid — Distinguishes visitors within 24 hours (expires: 24 hours)You can manage your cookie preferences through your browser settings. Disabling essential cookies may prevent the platform from functioning properly.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Owner data | Duration of account + 90 days | Service delivery and data export period |
| End User engagement data | Duration of associated campaign | Campaign analytics |
| Security logs | Retained for platform security | Legitimate interest (fraud prevention, security) |
| Deletion request records | Permanently retained | Legal compliance and audit trail |
| Backup data | Rolling backups (overwritten periodically) | Disaster recovery |
Important:
As SML operates solely as a Data Processor (a marketplace tool), all data privacy rights, obligations, and compliance responsibilities under GDPR, CCPA, PIPEDA, or any other applicable regulation rest entirely with the Account Owner (Data Controller). SML does not accept, guarantee, or assume any rights or obligations on behalf of End Users or Account Owners.
The Account Owner, as the Data Controller, is solely responsible for:
SML provides a Delete My Data page as a convenience tool only. This tool does not constitute SML accepting any legal obligation, guarantee, or responsibility for data deletion compliance. The Account Owner remains the sole party responsible for fulfilling all data rights under applicable law.
End Users may submit a deletion request through this tool. Upon receiving a valid request, SML will process the removal of data from its systems as a service to the Account Owner. All legal liability for compliance with deletion obligations remains with the Account Owner.
For informational purposes only, the following regulations may apply to the Account Owner's use of the Platform. Compliance with these regulations is entirely the Account Owner's responsibility:
| Regulation | Jurisdiction | Responsible Party |
|---|---|---|
| GDPR (Articles 15-20) | European Union / EEA | Account Owner (Data Controller) |
| CCPA (Section 1798.105) | California, United States | Account Owner (Data Controller) |
| PIPEDA (Principle 4.3.8) | Canada | Account Owner (Data Controller) |
| Meta/Instagram Terms of Service | Global | Account Owner |
SML expressly does not accept any liability, obligation, or responsibility for:
The Account Owner agrees to indemnify and hold harmless SML from all such claims as outlined in our Terms & Conditions.
We implement appropriate technical and organizational measures to protect your data:
While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
SML is a business-to-business (B2B) platform. Account Owners must be at least 18 years of age. The Platform relies on Instagram's own age verification and restrictions for End Users (minimum 13 years in most jurisdictions).
We do not knowingly collect personal data from children under 13. If we become aware that data has been collected from a child under 13, we will delete it promptly.
SML is headquartered in the United States. If you access the Platform from outside the United States, your data may be transferred to and processed in the United States. By using the Platform, you consent to this transfer.
We serve Account Owners in any country permitted by U.S. federal law. The Platform may not be used from sanctioned countries (Cuba, Iran, North Korea, Syria, Crimea region, etc.).
The Platform integrates with third-party services. Each has its own privacy policy:
We are not responsible for the privacy practices of third-party services.
All Privacy Responsibilities Rest with the Account Owner
As the Data Controller, the Account Owner bears sole and complete responsibility for all privacy-related obligations. SML provides tools only and accepts no liability for the Account Owner's compliance or non-compliance.
The Account Owner is solely and exclusively responsible for:
The Account Owner agrees to indemnify and hold harmless SML from any and all claims, damages, fines, penalties, or legal actions related to privacy, data protection, or data rights compliance.
For detailed guidance, Account Owners should refer to the Campaign Owner Privacy Guide provided during onboarding.
We may update this Privacy Policy from time to time. We will notify Account Owners of material changes via email at least 30 days before the changes take effect. The “Effective Date” at the top of this page indicates when this policy was last revised.
Continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy.
If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about your data, please contact us:
Social Media Loyalty
| Topic | Summary |
|---|---|
| What We Are | A data analytics marketplace (Data Processor) |
| Data Controller | The Account Owner (business/brand) |
| Data Scraping | NOT by SML; by Third-Party APIs at Account Owner's direction |
| Privacy by Default | Usernames masked, photos blurred; revealed only via Opt-In |
| Data Selling | We do NOT sell personal data |
| Data Rights | All data rights compliance is Account Owner's responsibility |
| Delete My Data | Convenience tool at /delete-my-data (no SML liability) |
| Governing Law | State of Texas, United States |
By using Social Media Loyalty, you acknowledge that you have read and understood this Privacy Policy.
© 2026 Social Media Loyalty - Pedram Bahaeabadi. All Rights Reserved.