MiraclePrivacy policy
Miracle (miracleapp.live) is a product of Zyposoft Technologies Private Limited ("Zyposoft", "we"). It is a service creators use to run the business side of brand collaborations: requests, quotes, agreements, content approvals, invoices, payments and results. Each creator who joins gets their own page at name.miracleapp.live. This policy covers the website, every creator's page and studio, and the Miracle admin panel.
Who this covers
- Creators who sign up for Miracle, and the team members they invite.
- Brands and their staff who send requests to a creator or follow a collaboration.
- People who message a creator on Instagram after that creator connects their Instagram account.
- Visitors to miracleapp.live and creators' pages.
What we collect
- Creators: email address, name, Instagram handle, niche, city, the page address they claim, rates and packages, payment details they choose to print on invoices (UPI ID or bank account, GST details), and the collaborations, invoices, files and notes they keep in Miracle.
- Brands: name, work email, phone (if given), company and billing details, and the requests, messages, files and feedback they send.
- Instagram data, only for a creator who connects their own professional Instagram account: profile details, follower numbers, posts and their insights (views, reach, likes, comments, saves, shares), audience breakdowns, direct messages sent to that account, and posts the creator schedules to publish. This comes from Meta's official Instagram API, with the creator's permission.
- People who message a creator on Instagram: only conversations that look like a brand collaboration are kept: the sender's Instagram username, name, profile picture and the messages in that conversation. Other messages are checked automatically when they arrive and are not stored.
- People who join a creator's email list: the email address and first name you give on her page, used only for that creator's emails to her list. Every email has a link to leave the list, and the creator can download or remove her list at any time.
- Technical data: sign-in sessions, a bot check when signing in, the device's notification subscription (only if you allow alerts), and basic logs needed to keep the service secure.
How we use it
- To run collaborations: show requests and where they stand, send quotes, agreements, invoices, reminders and results reports by email.
- To let a creator read and reply to Instagram direct messages from brands, and to publish content the creator approves and schedules to the creator's own Instagram account.
- To show a creator's audience and results to brands on that creator's page and media kit, when the creator chooses to share them.
- To review new creator sign-ups and keep the service safe.
Who processes it for us
- Supabase: database, sign-in and file storage.
- Cloudflare: runs the app and creators' pages, the sign-in bot check, and optional AI features (reply drafts, captions, reading screenshots), which only receive the text or image being processed at that moment.
- Google Gemini: a backup for the optional AI features when Cloudflare's free daily amount is used up. Email addresses and phone numbers are removed first; screenshots and incoming Instagram messages are never sent to it.
- Vercel: hosts this website.
- An email delivery service: sends sign-in codes and collaboration emails.
- Meta: Instagram, when a creator connects their account.
How long it's kept
Collaboration records and invoices are kept while the account is active and as long as needed for tax records (in India, usually 8 years for invoices). Instagram numbers are refreshed daily while the account is connected and stop updating when the creator disconnects. Anything can be deleted on request, except records the law requires us to keep; see data deletion.
Security
Data is sent over encrypted connections. Each creator's data is kept apart from every other creator's, and only that creator and their invited team can see their studio. Instagram access tokens are stored on the server and never shown in the browser. Sign-in uses one-time email codes, so most people never set a password.
Your choices
- Ask for a copy of your data, a correction, or deletion at any time.
- Creators can disconnect Instagram from their studio (My page) at any time, or remove Miracle's access in Instagram: Settings, then Website permissions (Apps and websites).
- Turn off notifications in your browser or phone settings.
Miracle is meant for adults running a business. It isn't intended for anyone under 18.
Changes
If this policy changes, the date at the top changes too.
Who is responsible
Zyposoft Technologies Private Limited runs Miracle and is responsible for the personal data described in this policy. Registered office: #7, Nisarga Layout, Chikkalsandra, Bangalore 560061, India.
Contact
Email contact@miracleapp.live with any question or request about your data.