Privacy policy

Who we are

Flarito is a product of Moonshine, Hyderabad, Telangana, India. Contact: support@flarito.com.

What we collect

Account: your email, name and a scrambled (hashed) version of your password. We never see or store your password itself.

Creator data: the profile links you connect, the public numbers we read from them (followers, views, likes, comments and post titles), and anything you type in: deals, income, ideas, media kit text, notes for Iggy.

API keys you give us for official platform access are stored encrypted and only used to read your own stats.

Payments are handled by Razorpay. We receive the payment ID, amount and status, never your card or bank details.

Basic technical data: your IP address (for security, rate limits and picking your currency) and the session cookie that keeps you signed in.

How we use it

To show your analytics, run alerts, generate Iggy's answers and keep your studio working.

Iggy (our AI) receives a summary of your numbers and the messages you send it, only to write its answer. This is processed by DeepSeek (see below). Your password and the platform API keys you give us are never sent to the AI.

We don't sell your data, show you third-party ads, or share it with brands. A brand only sees your media kit if you make it public, and an agency only sees your studio if you join it with an invite link.

Who processes your data for us

DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd., servers in the People's Republic of China) writes Iggy's answers. It receives the stats summary and messages described above, under its own privacy policy at platform.deepseek.com. If you'd rather not use Iggy, don't send it messages: every other feature works without it.

Razorpay (India) processes payments.

Our email provider sends sign-in codes and alerts to your email address.

Google and Facebook, only if you choose to sign in with them, confirm your email address to us.

ipwho.is looks up the country of your IP address so we can show prices in your currency.

The platforms you connect (YouTube, Instagram and others) receive the requests we make to read your public numbers or, with your API key, your own stats.

Cookies

We use one essential cookie to keep you signed in. No advertising or tracking cookies.

Your rights

Download everything we hold about you from Iggy memory → Your data, as a JSON file.

Delete your account and all its data from the same page. It's removed from our database immediately; backups roll off within 30 days.

Correct or remove anything Iggy has learned about you on the Iggy memory page.

These rights apply wherever you live, including under India's DPDP Act and the EU/UK GDPR. Questions or requests: support@flarito.com.

Security

Passwords are hashed with scrypt, sessions use secure HttpOnly cookies, platform keys are encrypted, and our servers run in locked-down containers. No system is perfect: if we ever have a breach that affects you, we'll tell you.

Children

Flarito is not for children under 13. Creators aged 13–17 should use it with a parent or guardian's permission.

Changes

If we change this policy in a way that matters, we'll show a notice in your studio before it takes effect.