Privacy Policy
Last updated: 18 October 2026
This policy explains what Pixtale Growth collects, why, and the choices you have. Pixtale Growth (thepixtale.com) is an Instagram analytics and AI growth tool for creators, brands and small businesses, run by The Pixtale from Jaipur, India, and used by people in India and other countries.
Who we are
Pixtale Growth, Jaipur, Rajasthan, India, decides how and why the personal data described here is used (the "data controller" or "data fiduciary"). Contact: info@thepixtale.com. More ways to reach us are on our contact page.
What we collect
- Your account: your name, email address, a securely hashed password (never the password itself), your plan and payment status, and how many analyses and Reel Research topics you have used.
- Sign in with Google: if you choose “Continue with Google”, Google shares your name, email address and a Google account ID with us, and confirms your email is verified. We use these only to create your account and sign you in. We don’t get your Google password, contacts, Gmail, Drive or any other Google data, and you can remove access any time at myaccount.google.com/permissions.
- Instagram data, only if you connect Instagram: through Instagram’s official API and only with the permissions you approve (
instagram_business_basic,instagram_business_manage_insights): your username, profile picture, follower and media counts, your posts and their metrics (such as reach, views, likes, comments, shares and saves), account-level insights, and aggregated audience demographics where Instagram provides them. - Public profile lookups: when you search a public Instagram username, we request that account’s public information (profile, follower count and recent public posts) through our data provider SocialCrawl (socialcrawl.dev). We keep the result for up to 24 hours to avoid repeat requests, keep simple follower and engagement snapshots to show growth over time, and don’t combine it with data from connected accounts.
- Reel Research: when you search a topic, we store the topic and fetch the most viewed public reels for it through SocialCrawl. Results are kept for up to 24 hours so opening the same topic again doesn’t count twice.
- YouTube channel analysis: when you analyse a YouTube channel, Pixtale Growth uses the YouTube API Services to request that channel’s public information: its name, handle, description, profile picture, subscriber, view and video counts, and its latest public videos (titles, upload dates, length, tags, and view, like and comment counts). On the Enterprise plan we also read a sample of public comments on a few of its top videos to summarise what viewers say. We don’t ask you to sign in to YouTube or Google for this, we don’t access any private YouTube data, and we never post or change anything on YouTube. By using this feature you agree to be bound by the YouTube Terms of Service, and Google’s handling of this data is described in the Google Privacy Policy. Results are refreshed at most every 12 hours and deleted from our storage within 30 days. We never grant ourselves access to your Google account; if you have ever given any app access to it, you can review and remove that access at security.google.com/settings/security/permissions.
- AI analysis: to write AI analysis and reel breakdowns, our server sends public numbers, captions, YouTube video titles and, on paid plans, a sample of public comments to OpenAI’s API. We don’t send your email, password or payment details. Under OpenAI’s API terms, data sent through the API isn’t used to train their models by default. Results are stored so the same analysis isn’t generated twice.
- Payments: in India, payments are handled by Razorpay; outside India, by Dodo Payments, which sells the subscription to you as our reseller and Merchant of Record. Card, UPI and bank details are entered on their secure checkout pages and never reach our servers. We receive the order and subscription IDs, plan, amount, currency, country and payment status.
- Emails: we send account emails (such as sign-up codes and password resets) through our email provider Resend. If you subscribe to our guides, we store your email address and the page you subscribed from, and you can unsubscribe any time by replying “stop”.
- Reviews: if you leave a review, your name, country, star rating and review text may be shown publicly on the site after we approve it.
- Technical and usage data: a session cookie that keeps you signed in, a browser ID cookie used to apply fair free-use limits, basic server logs (such as IP address and error messages) used for security and rate limiting, and simple usage events (such as pages opened and buttons used, with country and a hashed visitor ID) that help us improve the site.
What we don’t do
- We never ask for or see your Instagram password. Sign-in happens on Instagram.
- We never post, comment, message or change anything on any Instagram account or YouTube channel. Access is read-only.
- We don’t sell your data, and we never use your Instagram or YouTube data, reports or anything you type into Pixtale Growth for advertising. Advertising cookies are set only if you accept them (see above).
- We don’t access private information of other people’s accounts.
How we use it
To run your account, show analytics and Reel Research results, generate AI recommendations, process payments and subscriptions, send the emails you need or asked for, keep the service secure and prevent abuse, and improve the site. We rely on our contract with you, our legitimate interest in running a secure and useful service, and your consent for analytics and advertising cookies and our guides email, which you can withdraw at any time.
Storage and security
Instagram access tokens are encrypted (AES-256-GCM) and stored on our server; they are never sent to your browser. Passwords are stored only as secure hashes. Data is transmitted over HTTPS. Analytics responses are cached for short periods to respect Instagram’s rate limits.
Service providers
We share data only with providers that help us run the service, and only for that purpose: Netlify (hosting and storage), Meta Platforms (the Instagram API), SocialCrawl (public Instagram data), Google (the YouTube API Services, for public YouTube data), OpenAI (AI analysis), Google (sign-in and website analytics), Razorpay and Dodo Payments (payments), and Resend (email). Some of these providers process data outside your country, including in the United States; we use providers that protect it with appropriate safeguards.
Retention
We keep your account data while your account is open. Instagram data is kept only while your account is connected; when you disconnect Instagram, delete your account, or remove Pixtale Growth from your Instagram settings, we delete your access token and cached Instagram data. Public lookup and Reel Research results are cached for up to 24 hours. YouTube API data is refreshed at most every 12 hours and deleted within 30 days of being fetched. Payment and invoice records are kept as long as tax and accounting laws require. Guides email subscriptions are kept until you unsubscribe.
Your rights
Depending on where you live, including under India’s Digital Personal Data Protection Act 2023, the UK GDPR and the EU GDPR, you can ask to access, correct, delete or get a copy of your personal data, object to or restrict how we use it, and withdraw consent. Email info@thepixtale.com and we’ll reply within 30 days. You can also complain to your data protection authority, such as the Data Protection Board of India or, in the UK, the ICO.
Deleting your data
See our Data Deletion instructions.
Children
Pixtale Growth is not intended for anyone under 18, and we don’t knowingly collect data from children.
Changes
We’ll update this page if this policy changes and change the date above.