Privacy Policy

CafeReach is a platform based in Chennai, India that helps cafes and creators discover each other, evaluate fit, and manage collaborations. In this policy, “CafeReach”, “we”, and “us” mean the operator of the CafeReach website and services.

Questions and privacy requests can be sent to support@cafereach.in.

• Account information, including email address, name, account role, and verification status.
• Profile information you provide, such as location, niches, rates, portfolio links, and profile image.
• Campaign details, invitations, responses, submissions, and collaboration status.
• Technical and security information needed to operate the service, such as session, request, and error records.

When a creator chooses Connect Instagram, CafeReach receives data for the Instagram professional account they authorise. Depending on availability, this includes:

• Instagram user ID, username, name, biography, profile picture, followers, following, and media count.
• Recent posts and Reels, including type, caption, thumbnail, permalink, and publication time.
• Likes, comments, views, reach, saves, and shares for imported media.
• An encrypted access token and its expiry date so CafeReach can refresh authorised data.

We use the instagram_business_basic permission for profile and media data and instagram_business_manage_insights for media insights. CafeReach does not receive your Instagram password, read your direct messages, or publish content on your behalf.

• Create and secure your account and provide the features you request.
• Show creator profiles, Instagram performance, Power Scores, rankings, and recommendations.
• Help cafes and creators arrange and manage collaborations.
• Maintain data accuracy, troubleshoot failures, prevent abuse, and protect the service.
• Respond to support, legal, safety, and data-rights requests.

We do not sell Instagram data or use it for third-party advertising.

• Relevant profile and performance information is shown to authorised CafeReach users as part of the marketplace.
• Service providers may process limited data for authentication, hosting, storage, email, image delivery, security, and support.
• Information may be disclosed when required by law or necessary to protect users, CafeReach, or the public.
• If CafeReach is reorganised or transferred, information may move with the service subject to applicable law.

Instagram access tokens are never shown to cafes, creators, advertisers, or other marketplace users.

We keep account and marketplace information while your account is active and as reasonably needed for the service, security, disputes, and legal obligations.

Disconnecting Instagram deletes the stored access token, imported Instagram profile, posts and insights, plus the Power Scores, rankings and recommendation analytics derived from that data. Meta deauthorisation and verified data-deletion callbacks perform the same deletion. See the public Data Deletion instructions for every available method.

Residual copies may remain temporarily in protected backups until those backups expire.

You may review or correct profile information in CafeReach, disconnect Instagram at any time, and request access, correction, deletion, or withdrawal of consent by emailing us. We may need to verify your identity before completing a request. Applicable law may provide additional rights or permit limited retention.

CafeReach uses safeguards including encrypted Instagram tokens, restricted access, secure sessions, and HTTPS in production. No system can guarantee absolute security.

Providers may process information outside your state or country, subject to contractual safeguards and applicable law. CafeReach is intended for people aged 18 or older and is not directed to children.

We may update this policy when the service or legal requirements change. The effective date above identifies the current version. Material changes will be communicated where required.