Privacy Policy

Athlete Insights ("the service", "we") is a dashboard operated by Peter Thorlund Software, a Danish sole proprietorship (CVR 46535669) registered at Baldersgade 39, 2. th, 8230 Åbyhøj, Denmark. The service helps sports talent managers view publicly available Instagram analytics for athletes they represent, in order to support sponsorship discussions.

Contact: peterthorlund@hotmail.com

When an athlete connects their Instagram account through an invite link, they grant us — via Instagram's official OAuth flow — access to a limited set of data from their Instagram Business or Creator account:

• Instagram username, display name, profile picture, account ID
• Public follower, following and media counts
• Aggregated insights: reach, impressions, profile views (last 28 days)
• Per-post metadata: caption, permalink, type, timestamp, likes, comments, saves, shares and views
• Active stories metadata while they exist (24h window) — content not stored after the story expires
• Anonymised audience demographics: age brackets, country, city — only available from Instagram for accounts with 100+ followers

We do not collect:

• Direct messages
• Login credentials
• The athlete's comments authored on other accounts
• Any data not exposed by Instagram's official Graph API

The data is used solely to present the athlete's social media performance to their manager in a dashboard format, and to generate one-page sponsorship reports.

We do not sell, rent, share or use the data for advertising. The data is never made available to anyone other than the manager who invited the athlete.

All data is stored in Supabase, hosted in the European Union (Frankfurt, Germany). Access tokens are encrypted at rest using AES-256-GCM with a key held only by our server. Data is scoped per manager via Postgres Row Level Security so that no manager can see another manager's athletes.

Snapshots of an athlete's statistics are kept for as long as the athlete remains connected. When the athlete is removed from the dashboard — either by their manager or by the athlete requesting deletion — all their data is erased within 7 days.

You may, at any time:

• Request a copy of all data we hold about you
• Request immediate deletion
• Withdraw consent via Instagram (Settings → Apps and websites → find Athlete Insights → Remove)

See our data deletion page for the deletion procedure, or email peterthorlund@hotmail.com. We respond within 14 days.

• Meta Platforms Inc.— Instagram Graph API. Data is fetched only with the athlete's explicit consent.
• Supabase Inc. — database and authentication, EU region.
• Vercel Inc. — application hosting.

Each of these providers has their own privacy policy governing the limited data they process on our behalf.

If we change this policy, we will update the date above. Material changes will be communicated to active managers via the dashboard.

Peter Thorlund — peterthorlund@hotmail.com