ListM

Privacy Policy

Last updated: September 29, 2026

Overview

ListM ("we", "us") provides a suite of browser extensions — including InsTF, InsC, InsFo, and InsGrow — that help you export and analyze the Instagram data you can already see while logged in to your own account. This Privacy Policy explains what data we handle, how, and why.

Your Instagram Data Stays on Your Device

  • All Instagram data accessed by our extensions is processed locally in your own browser. Exported files (CSV / Excel / JSON) are generated on your device and saved directly to it.
  • We do not collect, store, transmit, or sell any Instagram data — yours or any third party's. We have no servers that receive the content you export.
  • We never ask for your Instagram password. Our extensions work with the session of the Instagram account you are already logged in to in your browser.

Information We Do Collect

To operate the website and paid subscriptions, we collect a limited set of information:

  • Account email: if you sign in (via Google) to activate a membership, we store your email address and subscription status.
  • Payment information: payments are processed by Paddle, our merchant of record. We never see or store your card details.
  • Usage analytics: we use Mixpanel and Vercel Analytics to understand how the website is used (page views, feature usage events). These events do not include any exported Instagram data.
  • Support conversations: if you contact us via the on-site chat (Crisp) or email, we keep those conversations to provide support.

How Your Data Is Stored and Protected

  • Encryption in transit: all connections to our website and services use HTTPS/TLS.
  • Secure storage: your account email and subscription status are stored on secure, access-controlled servers hosted with reputable cloud providers. We never store passwords (sign-in is handled by Google) or payment card details (handled entirely by Paddle, our PCI-DSS compliant merchant of record).
  • Access controls: access to stored data follows the least-privilege principle, limited to the systems and personnel needed to operate the Service.
  • Ongoing review: we regularly review and update our security measures and assess for vulnerabilities.
  • Breach notification: if a security incident affects your personal information, we will notify you and the relevant authorities within 72 hours of becoming aware of it, where required by law.

How Long We Keep Your Data

  • Account information (email, subscription status): kept while your account is active, and for up to 12 months after your subscription ends to handle support, refund, and legal obligations — then deleted or anonymized.
  • Transaction records: processed and retained by Paddle as merchant of record, in line with tax and accounting regulations.
  • Support conversations: kept for up to 24 months, then securely deleted.
  • Usage analytics (Mixpanel, Vercel Analytics): retained according to those providers' standard retention periods; these events never contain exported Instagram data.

You may request earlier deletion of your account information at any time (see Your Rights below).

What We Never Do

  • We do not sell or rent any personal data to third parties.
  • We do not collect data about Instagram users other than you.
  • We do not upload your browsing activity on Instagram or your exported files anywhere.

Your Rights

You may request access to, correction of, or deletion of the account information we hold about you (email and subscription status) at any time by contacting us. Deleting your account information does not affect the data on your own device, which is entirely under your control.

Changes to This Policy

If we update this Privacy Policy, we will post the new version on this page with a revised "Last updated" date.

Contact Us

Questions about this policy? Email us at support@listmore.info.