Creator & Brand Privacy Notice

Who this notice is for

This notice applies to creator and brand accounts on Moocha. It supplements our Privacy Notice, which continues to apply to you in full — this page only describes the additional processing that comes with a creator or brand account. Contact details, your rights, and how to complain are all in the main notice.

Connecting your Instagram account

Connecting Instagram is part of brand onboarding — it is the standard way to import your content. If you would prefer not to connect your account, contact us at privacy@moocha-app.com and we will arrange an alternative. If you connect, we collect and store:

• Your Instagram user ID and username
• An access token that lets us fetch your Instagram posts (stored securely)
• The captions, photos, and videos you choose to import into Moocha
• A record linking each imported post to its Instagram original, and connection and sync timestamps

The connection stays active until you disconnect — we refresh the access token automatically so you don't need to reconnect, and imports can continue on a schedule.

Lawful basis: Contract — connecting Instagram and importing your posts is a feature you choose to use, and we need this information to provide it.

Sharing with Meta Platforms (Instagram)

To operate the connection we exchange data with Meta: we send a secure authorisation request and receive your profile details and the posts you import. Meta handles your Instagram account as an independent controller under its own privacy policy.

Cookies

How long we keep this information

• Instagram connection data (username, access token, import records): deleted when you disconnect Instagram or close your account
• Imported posts: treated like any other post — deleted when you delete them or close your account

When you disconnect Instagram or close your account, we delete our copy of your access token. You can also revoke Moocha's access at any time from your Instagram account settings.

Security

Instagram access tokens are stored encrypted. All protections described in the main Privacy Notice apply to this data too.