Privacy policy

This Policy explains how the InstaHub service (the website instahub.top and the Telegram bot) processes personal data in accordance with the Law of Ukraine “On Personal Data Protection”. By using the Service, you agree to this Policy and the Terms of Use.

1. What data we collect

• Account: email, name; if you sign in with Google — your Google account identifier, name and email from it. Your password, if you set one, is stored only as an irreversible hash. The two-factor sign-in secret — if you enabled it.
• Telegram: Telegram ID and username, if you use the bot or have linked it to your account.
• Orders: links to public pages or posts, usernames for auto-services, quantities, statuses, balance history, support requests.
• Payments: amount, status and Monobank or NOWPayments invoice number. Card details are entered on the Monobank page — we do not receive or store them. For crypto payments we receive the payment status, coin and amount paid from NOWPayments; your wallet address is visible on the public blockchain, but we do not use it.
• Technical data: IP address, browser and device type, request times — in server logs, to protect against abuse and to find errors.
• Visit statistics: Google Analytics collects anonymized data — where visitors come from, which pages they view, device type. We do not use it to identify you.
• Website usability analytics: the PostHog service records how pages are used (navigation, clicks, anonymized session recordings) so that we can find inconvenient spots. Input field contents, balance amounts and keys are hidden in the recordings; the user is identified only by an internal number, without email or name.

We do not collect passwords to your social media accounts and never ask for them.

2. Why and on what basis

Data is processed to perform the contract (the Terms of Use) and on the basis of your consent: to create and protect your account, fulfill orders, credit payments, issue refunds, send status notifications and password recovery emails, respond in support, prevent fraud and improve the Service. We do not sell your data or share it with third parties for advertising.

3. Who data is shared with

• Service providers — only the link (or username) and quantity needed to fulfill the order. Your email, name or payment details are not shared with providers.
• Monobank — to accept card payments.
• NOWPayments — to accept crypto payments (only the amount, invoice number and top-up description are shared).
• Google — for Google sign-in (if you use it) and anonymized visit statistics (Google Analytics).
• PostHog — for website usability analytics (data is stored in the EU).
• Telegram — for the bot and notifications to work.
• Email service — your email for sending service emails (password recovery, notifications).
• Post retrieval service — the username of a public profile for auto-services, to find new posts.
• Hosting and technical services — for storing data on the server, backups and finding errors.
• Government authorities — only upon a lawful request in cases provided for by law.

Some of these services are located outside Ukraine. We share only the minimum necessary data with them.

4. Cookies and local storage

We use session cookies (to keep you signed in) and form protection cookies — the website does not work without them. Google Analytics and PostHog set their own cookies for statistics; you can disable them with an ad blocker or the Google add-on. The browser's local storage holds minor interface settings (for example, that you closed a tip).

5. How long we keep data

Account data and order history — for as long as the account exists. After the account is deleted, the data is deleted or anonymized, except for payment information, which we may keep for as long as required by law, and data needed to protect against fraud. Server logs and backups are kept for a limited time and are automatically rotated.

6. Security

The connection to the website is encrypted (HTTPS), passwords are stored only as hashes, only administrators have access to the data, and two-factor sign-in is available. No method of transmission or storage gives an absolute guarantee, so keep your password safe and do not share access to your account with others.

7. Your rights

Відповідно до статті 8 Закону України «Про захист персональних даних» ви маєте право знати, які ваші дані ми обробляємо, отримати до них доступ, вимагати виправлення або видалення, відкликати згоду на обробку, заперечити проти обробки та звернутися до Уповноваженого Верховної Ради України of прав людини або до суду. Змінити дані можна в профілі; щоб видалити акаунт чи скористатися іншими правами, contact support on the website. We reply within 30 days.

8. Age

The Service is intended for persons aged 18 and over. We do not knowingly collect data from children; if you believe a child has provided us with data, write to support — we will delete it.

9. Changes

We may update this Policy. The new version takes effect from the moment it is published on this page; we will announce significant changes on the website.