Privacy notice

Last updated 30 September 2026

Elgrace is a creator and brand collaboration agency, a Velora Enterprise brand. We keep a database of social media creators so we can offer them paid brand work. This page explains, in plain English, what is in it and how to get out of it.

What we collect

• Public Instagram profile data of business and creator accounts, read through Meta's official Instagram Graph API: username, name, bio, website, profile picture, follower, following and post counts, and recent public posts with their captions and like, comment and view counts.
• Published business contact details from your own public bio, profile, post caption or supplied public transcript. We record the source and time of each observation. Extraction does not verify deliverability or permission to message.
• Public YouTube channel data from the official YouTube Data API: channel name, subscriber, view and video counts, and country.
• Other public creator records, including TikTok profiles and content, supplied by our team through imports or collected through an explicitly enabled provider such as Apify. Third-party collection may retrieve public platform pages. Imported claims are not treated as platform-confirmed partnerships.
• What you give us if you sign up with us, opt in, or connect your account.
• Campaign records such as briefs, agreed terms, approvals, content evidence, payment references and operator notes.

From this we work out numbers such as engagement rate and average views, and make best guesses about your city, language and content categories, and which posts look like brand collaborations.

What we do not do

• Our direct Meta and YouTube integrations use official APIs. Optional public collection providers are separate sources and are disabled unless our team explicitly enables and requests collection.
• We do not collect private accounts or private platform messages. Supplied private, deleted, reposted or other creators' posts are excluded from public profile evidence.
• We do not sell this data.

Why we use it

To find creators who fit a brand's campaign, contact them about paid work, and measure how campaigns perform. When we suggest you to a brand we may share your public profile numbers with that brand.

Who can see it

The Elgrace team and our internal tools can access stored records through authorized sessions. Enabled service providers receive the data needed for a requested collection, message delivery or optional brief interpretation. We store our working records on servers we control.

How long we keep it

• Instagram data: while your account stays public and professional. When its official crawler is enabled, refreshes are scheduled every 7 to 90 days and a short history of summary numbers is kept. A withdrawn bio observation is removed at the next refresh; the same contact may remain if another current public observation still contains it.
• Imported and provider records: we show when they were supplied or collected. They are not guaranteed to be continuously refreshed. A refetched private or withdrawn post loses its contact and brand observations.
• If your account becomes private or personal, or is gone: when a refresh finds this, we delete the profile, posts, numbers, brand links and contact details we read from Instagram. We keep only the handle, to check again later, and stop checking after about a year.
• YouTube public data: deleted after 30 days, unless you connect your channel to us.
• If you ask to be removed: deleted within 7 days. An email or phone number you leave on the removal form is used only to confirm the removal and is deleted once the removal is done. Your confirmation code keeps working for 30 days after that.

How to be removed

Use the removal form or email privacy@elgrace.in with your handle, platform and profile link. We stop collecting straight away and delete stored records matching that handle within 7 days. We keep a one-way fingerprint (a hash) to prevent it being added back. If you use different handles on different platforms, include each one.

Connected accounts

If you connect an account through Facebook Login, we store the access token on our server and use it only to read data through Meta's official APIs. You can remove our access at any time in your Facebook settings under Business Integrations, and ask us to delete what we hold.

Your choices

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Write to privacy@elgrace.in. Depending on where you live, data protection law may give you more rights, and we will help you use them.

Changes

If we change this notice we update the date at the top.