Privacy Policy

Effective date: October 28, 2026

This Privacy Policy explains how Audience Upside LLC (“Audience Upside,” “we,” “us,” or “our”) collects, uses, shares and protects personal information when you use our website at audienceupside.com, the free Creator Audit, the Audience Upside workspace, our emails and related services (together, the “Services”).

Audience Upside LLC
1301 Justin Road, STE 201 Box 5123
Lewisville, TX 75077
United States

Privacy contact: [email protected]

1. The short version

• We collect what you give us in the Creator Audit form, information about your public social profile, and, only if you choose to connect it, data from your own Instagram account.
• We use it to produce your Creator Audit and your ongoing reports, and to email you about them.
• We do not sell your data. We never use your Instagram data for advertising, and we do not use it to profile you or anyone else outside your own account.
• We use the Meta Pixel and Meta’s Conversions API to measure our own ads on Facebook and Instagram. If you are in the EU, the EEA, the UK or Switzerland, we only do this if you say yes. Everyone else can opt out. See Ad measurement.
• You can ask us to delete your data at any time (our team handles requests by hand, within 30 days), and you can remove our access to Instagram yourself. See our Data Deletion page.

2. Information you give us

When you request a Creator Audit or use Audience Upside, you may give us:

• Contact details: your first name, optional last name and email address.
• Creator details: your primary social handle or profile link, your audience size range, and whether you already sell your own product or service.
• Workspace content: answers to questions about your business, goals, offers and audience; choices you make between recommendations; notes, approvals and feedback.
• Messages: anything you send us by email or through the Services.
• Payment details: if you buy a subscription, payment is handled by Stripe. We receive a record of the purchase and the last digits of the card, never the full card number.

3. Information from Instagram and Meta

Audience Upside uses the Instagram Graph API, provided by Meta, in two ways.

Public profile information you point us to. When you give us an Instagram handle in the Creator Audit form, we look up that account’s public professional profile through the Instagram Graph API. This works only for Instagram professional (business or creator) accounts. We may collect:

• the username, display name, profile picture, biography and website link;
• the follower, following and post counts;
• recent public posts: captions, media type, publish time, permalink, and like and comment counts.
• to show you your own audit, small saved copies of your public profile photo and post images from Instagram. We keep them for 30 days for a free audit, or for as long as you subscribe, and delete them when you ask us to delete your data.

Your own account, if you connect it. If you choose to connect your Instagram account to Audience Upside, you approve specific permissions on Meta’s own screen. Depending on what you approve, we may collect:

• your profile information (as above);
• your media: posts, Reels and stories you have published, with their captions and metadata;
• insights for your account and your media, such as reach, views, engagement, saves, shares and aggregated audience demographics (for example age range, country and city), as Meta reports them;
• comments on your own posts, if you grant that permission.

Why we collect it. We use Instagram and Meta data only to produce your Creator Audit, your recurring Upside Operator reports and the suggestions and drafts in your own Audience Upside workspace. They show what your audience responds to, how that changes over time, and what may be worth doing next. That is the only purpose.

What we never do with it.

• We do not sell it or rent it to anyone.
• We do not use it for advertising, ad targeting or ad measurement.
• We do not use it to build profiles of you, your followers or anyone else for any purpose outside your own Audience Upside account.
• We do not share it with data brokers.
• We do not train AI models on it.

Other public sources. To put your numbers in context, we may also use public creator-analytics data about your public profile from CreatorDB (we send it your handle), benchmark statistics for similar accounts, and the public pages of a website linked from your profile.

4. Information collected automatically

• Website analytics. We use Cloudflare Web Analytics, which is cookieless and does not track you across sites. We also record simple funnel events (for example “viewed step 2 of the audit form”) tied to a random identifier for your browser tab. The events themselves contain no name, email or handle. If you submit the form, that identifier is stored with your request, so the pages you viewed and the form steps you completed in that tab are linked to your sign-up. We use this to see where the form loses people.

• Abuse protection. To stop automated floods of the audit form, we count requests per IP address. We store only a keyed one-way hash of the address, never the address itself, and delete the counts after two days.

• Bot protection. The audit form uses Cloudflare Turnstile to tell people from bots. Turnstile processes technical signals from your browser for that purpose only.

• Cookies. We set a first-party cookie, au_variant, that remembers which version of our homepage you saw (we test wording), and au_ad_consent, that remembers your ad-measurement choice. Audience Upside uses essential cookies to keep you signed in. The Meta Pixel and Allmata set their own cookies, described below.

• Ad measurement (Meta Pixel and Conversions API). We advertise on Facebook and Instagram. To see which ads bring people to us, and so Meta can show our ads to people more likely to be interested, our website and the Audience Upside workspace use the Meta Pixel, and our servers use Meta’s Conversions API. They tell Meta when you view a page, view the Creator Audit form, submit it, activate your account, start a trial or subscribe. With those events Meta receives:

  • your email address, hashed (turned into a one-way code) before it leaves us, so Meta can match it to a Facebook or Instagram account;
  • Meta’s click and browser ids (the _fbc and _fbp cookies, and the fbclid from an ad link);
  • your IP address and browser type (user agent);
  • the page address, the event’s name and time, and for a subscription its price.

  We send nothing else about you: no name, no handle and no Instagram data. Meta uses this information under its own terms and privacy policy. If you are in the EU, the EEA, the UK or Switzerland, nothing is sent to Meta unless you choose Accept on our banner. Everyone else gets it by default. To opt out, choose Change your ad choice on this page and then No thanks, or turn on Global Privacy Control in your browser, which we treat as an opt-out. You can also manage how Meta uses your activity in your Facebook or Instagram ad preferences.

• Funnel analytics (Allmata). Allmata funnel analytics sets a first-party cookie with an anonymous visitor id and the ad tags of the link you arrived from (for example UTM tags, fbclid or gclid), so we can see which campaigns lead to sign-ups. It receives no personal data: no name, email or handle. Raw events are deleted after 90 days. In the EU, the EEA, the UK and Switzerland it only counts you after you choose Accept.

• Technical logs. Our hosting providers keep standard logs (IP address, browser type, time of request) to run and secure the Services.

5. How we use information

We use personal information to:

• produce, deliver and update your Creator Audit and Upside Operator reports;
• create and secure your Audience Upside workspace, and send you the activation link;
• email you about your audit and your account (you agree to these when you submit the form);
• send you tips and offers by email, only if you ticked the separate, optional box for them (you can unsubscribe at any time);
• process payments for subscriptions you choose to buy;
• understand which pages and steps work, so we can improve them (using funnel analytics events);
• measure and improve our own ads on Facebook and Instagram (see Ad measurement);
• prevent abuse and keep the Services secure;
• meet legal obligations.

AI-assisted processing. We use AI models to help analyze information and draft recommendations. The relevant information is sent to AI model providers, through the Vercel AI Gateway, only to generate your outputs. We do not train AI models on your data. AI-generated analysis can be incomplete or wrong, so please review important recommendations before relying on them.

6. Who we share information with

We share personal information only with service providers that help us run the Services, under contracts that limit their use of it to providing those services to us:

Sub-processors

These are the service providers (sub-processors) that process personal information for us, including on behalf of creators under our Data Processing Addendum. Partnership creators get at least thirty (30) days’ notice before we add or replace a sub-processor that processes their customers’ data, as the Data Processing Addendum sets out.

We may also disclose information if the law requires it, to protect the rights and safety of our users or of Audience Upside, or as part of a merger, acquisition or sale of the business, in which case this policy continues to apply to your information.

We do not sell personal information. Under some US state laws (for example California’s), the ad measurement described in Ad measurement may count as “sharing” for targeted advertising. You can opt out of it at any time: choose Change your ad choice and then No thanks, or turn on Global Privacy Control.

7. How long we keep information

• Your account and audit data, including Instagram and Meta data, are kept while your account is active, so your reports can show changes over time.
• If you ask us to delete your data, our team deletes it by hand, including all Instagram and Meta data, within 30 days, and confirms by email.
• If you stop using the Services, we review inactive accounts periodically and delete data we no longer need.
• If you remove our access to your connected Instagram account, we delete the data we received from it (posts, comments, insights, themes and the access token) as soon as Meta tells us. We keep the public profile information you gave us in the audit form for your reports until you ask us to delete it.
• Comments from your connected account are deleted after 12 months.
• Funnel analytics events are deleted automatically after 24 months, or with the rest of your data if you ask us to delete it.
• Rate-limit counts (hashed IP addresses) are deleted automatically after two days.
• Ad-measurement ids (the _fbc and _fbp values and your browser type) are kept with your audit request, and deleted with it. Meta keeps what it receives under its own policy. Allmata deletes raw funnel events after 90 days.
• Records we must keep by law, such as payment and tax records, are kept for as long as the law requires.

8. How we protect information

We use encryption in transit, access controls that limit each creator’s data to that creator and to authorized Audience Upside staff, and providers with established security programs. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you, as the law requires.

9. Your rights and choices

Wherever you live, you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is wrong;
• delete your information;
• stop sending you marketing email (every marketing email has an unsubscribe link);
• stop ad measurement: Change your ad choice (then choose No thanks), or turn on Global Privacy Control;
• withdraw any consent you gave.

Depending on where you live (for example in the EU, the UK, California or Texas), you may have further rights under local law, such as objecting to or restricting certain processing, or appealing a decision we make about your request. We do not discriminate against you for using your rights.

To make a request, email [email protected] from the address you used with us. Our team handles requests by hand. We may need to confirm it’s you before we act, and we respond within 30 days.

10. How to disconnect Instagram or Facebook

You can remove Audience Upside’s access at any time, without contacting us:

• In Instagram: open your profile, tap the menu, then go to Settings and activity → Website permissions → Apps and websites, choose Audience Upside and tap Remove.
• In Facebook: go to Settings & privacy → Settings → Business integrations (or Apps and websites), choose Audience Upside and tap Remove.

Removing access in Instagram also deletes the data we received from your connected account (posts, comments, insights, themes and the access token). Public profile information you gave us in the audit form is kept for your reports until you ask us to delete it. Comments are deleted after 12 months. To have everything else deleted, follow the steps on our Data Deletion page.

11. International processing

Audience Upside is based in the United States, and our providers may process information in the United States and other countries, including Taiwan (CreatorDB) and the global networks of the providers listed in Sub-processors. Where the law requires it, we rely on appropriate safeguards for these transfers.

12. Children

The Services are for adults running a creator business. They are not directed to children under 13, and you must be at least 18 (or the age of majority where you live) to use them. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

13. Changes to this policy

If we change this policy, we will update the effective date at the top of this page. If a change materially affects how we use information we already hold, we will tell you by email before it takes effect.

14. Contact us

Questions or requests about privacy:

Audience Upside LLC
1301 Justin Road, STE 201 Box 5123
Lewisville, TX 75077
United States

Email: [email protected]