Privacy Policy

Account information

When you sign up for Instant, we collect your name, email address, and company name. This is the core information we need to create and manage your account.

Shopify store data

When you connect your Shopify store, Instant accesses product data through the Shopify API — including product titles, descriptions, images, metadata, and other catalog attributes. We do not access your customer data, order history, or financial data from Shopify.

Usage and analytics data

We collect information about how you use the platform — which features you use, what actions you take, session duration, and similar behavioural data. This helps us understand what's working and where we can improve. We collect this through a combination of server-side logging and third-party analytics tools (see Section 4).

Payment data

When you subscribe to a paid plan, payments are processed by Stripe. We do not store your card details. Stripe may share limited transaction metadata with us (plan type, payment status, billing date). Stripe's own privacy policy governs how they handle your payment information.

We process your personal data for the following purposes and on the following legal bases under the GDPR:

We do not use your data for advertising, profiling for third-party purposes, or sell it to anyone.

Connecting your Shopify store gives Instant access to your product catalog via the Shopify API. This access is limited to what's needed to provide the service — primarily product data.

We act as a data processor on your behalf for any personal data that may be contained within your catalog. You remain the data controller for that data.

You can revoke Instant's access to your Shopify store at any time from your Shopify admin. This will disconnect the integration and suspend your access to Instant.

We use the following third-party services to operate the platform. Each handles data under their own privacy policies and under data processing agreements with us where required by the GDPR.

Stripe

Payment processing. Stripe processes billing and subscription data. stripe.com/privacy

Google Analytics

Usage analytics. We use Google Analytics to understand how customers navigate and use the platform. Data is collected via cookies and may include IP addresses (anonymised where possible). policies.google.com/privacy

Hotjar

Session recording and heatmaps. Hotjar records anonymised session activity to help us identify usability issues. Personal identifiers are masked. hotjar.com/legal/policies/privacy

Anthropic

Data enrichment and content generation. When you use Instant's enrichment features, product data from your catalog is sent to Anthropic's API to generate suggestions and descriptions. Anthropic processes this data under a data processing agreement with us. anthropic.com/privacy

A full and current list of sub-processors is available at getinstant.io/subprocessors or on request at hello@getinstant.io.

Instant uses cookies and similar tracking technologies. When you first visit getinstant.io, you'll be asked to accept or decline non-essential cookies via our cookie banner. You can change your preferences at any time through the cookie settings link in the footer.

Essential cookies

These are required for the platform to function and cannot be disabled. They include session cookies that keep you logged in and cookies that remember your preferences within a session. No consent is required for these.

Analytics cookies

These are only placed if you accept them. We use:

• Google Analytics to understand how customers navigate and use the platform. This may involve collecting anonymised IP addresses and behavioural data. You can opt out at any time via tools.google.com/dlpage/gaoptout.
• Hotjar to record anonymised session activity and generate heatmaps. Personal identifiers are masked before recording. You can opt out at hotjar.com/legal/compliance/opt-out.

Managing your preferences

You can withdraw consent for analytics cookies at any time by:

• Using the cookie settings link in the footer of getinstant.io
• Adjusting your browser settings to block or delete cookies
• Using the opt-out tools linked above

Withdrawing consent does not affect any processing that took place before you withdrew it. We do not use cookies for advertising, remarketing, or cross-site tracking.

Instant stores and processes your data within the EU.

Where we use sub-processors that operate outside the EEA, we ensure appropriate safeguards are in place — including EU Standard Contractual Clauses (SCCs) where required. A list of our sub-processors and their data locations is available on request.

We retain your data for as long as your account is active. Following cancellation or account closure, your data is retained for 14 days and then deleted from our systems.

You can request deletion of your data at any time — see Section 8. Some data may be retained longer where required by law — for example, financial records required for tax compliance.

Under the GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request that inaccurate data be corrected
• Deletion — request that your data be deleted
• Restriction — request that we restrict processing of your data in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at hello@getinstant.io. We will respond within 30 days.

You also have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet) at datatilsynet.dk if you believe we have handled your data incorrectly.

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include encryption in transit (TLS), access controls, and regular security reviews.

No system is completely secure. If you have reason to believe your account has been compromised, contact us immediately at hello@getinstant.io.

We may update this policy from time to time. If we make material changes, we'll notify you by email or in-app notice at least 14 days before the changes take effect. The current version is always available at getinstant.io/privacy.