Privacy Policy

Doctrine Social helps brands, creators, and teams understand the people who follow their public social accounts. The product turns public audience data into searchable client portals, ranked follower lists, audience reports, training sets, and operational workflow tools.

This Privacy Policy explains how Doctrine Social collects, uses, shares, and protects information when you visit our site, book a demo, create an account, use a portal, or interact with our services.

Account and contact information: name, email address, organization, login credentials, invited team members, access permissions, and messages you send to us.

Customer setup and billing information: selected plan, account activation status, Stripe customer and subscription references, invoice metadata, and payment status. Payment card details are handled by Stripe and are not stored by Doctrine.

Portal and product usage information: the accounts you can access, saved lists, favorites, filters, training decisions, search queries, notes, report activity, and workflow status.

Public social audience information: public Instagram profile and follower information such as usernames, display names, profile images, follower counts, biographies, public account relationships, location or category signals inferred from public data, and enrichment or scoring outputs generated for customer portals.

Technical information: IP address, device and browser details, cookies, authentication session data, server logs, error diagnostics, performance data, and security events.

Optional notification information: if an admin enables push notifications, we store push subscription data so we can send operational updates.

We use information to provide, secure, and improve Doctrine. That includes authentication, account access, customer setup, billing, audience scraping and enrichment, ranking and scoring, portal generation, CRM-style list workflows, support, debugging, abuse prevention, and product analytics.

We may also use aggregated or de-identified information to understand system performance, improve scoring quality, and evaluate product reliability.

Doctrine uses cookies and local storage for authentication, session management, preferences, security, embedded booking flows, and basic diagnostics. Some service providers may set their own cookies when you use embedded or hosted flows such as booking, authentication, or payment pages.

Doctrine works with infrastructure and product service providers to operate the service. These may include Supabase for authentication and database services, Vercel for hosting, Fly.io for workers, S3-compatible object storage for assets, Stripe for billing, Resend for email, Sentry for error monitoring, SocialAPI or similar data providers for public social data, OpenAI or other model providers for enrichment and research workflows, and Cal.com for demo scheduling.

These providers are authorized to process information only as needed to provide services to Doctrine or comply with law.

We share customer portal information with users authorized by the relevant customer or organization. We do not sell personal information.

We may disclose information to service providers, to comply with law or valid legal process, to protect Doctrine, customers, users, or the public, or as part of a merger, acquisition, financing, or sale of assets.

Doctrine processes public social data to help customers understand their own audiences. Standard Doctrine reports are based on publicly available account and follower information and related enrichment signals. Doctrine does not require a customer's Instagram password for standard audience reporting.

If a future integration asks you to connect another account or grant platform permissions, we will use that authorized data only for the disclosed product purpose and according to the permissions you approve.

Doctrine uses access controls, row-level database permissions, server-side service credentials, encrypted transport, operational monitoring, and scoped portal access checks to protect information.

We retain information for as long as needed to provide the service, support customer portals, maintain security and audit records, comply with legal obligations, resolve disputes, and enforce agreements. Customers may request deletion or export of their information, subject to contractual, legal, and technical limits.

You may request access, correction, deletion, or export of information associated with your account. You may also opt out of non-essential communications and disable browser push notifications through your browser or device settings.

If your information appears in a Doctrine portal because it is public social audience data, contact us and we will review requests to remove, correct, or limit use of that information where required by law or appropriate for the service.

Doctrine is operated from the United States. If you use the service from another country, your information may be processed in the United States or other locations where Doctrine and its service providers operate.

Doctrine is not directed to children under 13, and we do not knowingly collect account information from children under 13.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and provide additional notice when appropriate.

For privacy requests or questions, email hello@doctrinesocial.com.