# Privacy Policy > What data Instamora collects, why we use it, who processes it for us, how long we keep it and how to get a copy or have it deleted. Canonical: https://instamora.com/privacy Updated: 2026-11-06 Version: 1.0 ## Who is responsible Instamora ("we", "us") decides how your personal data is used and is responsible for it. Write to [privacy@instamora.com](mailto:privacy@instamora.com) with any question about this policy or about your data. If the law requires us to appoint a representative in the European Union or the United Kingdom, we will name the representative on this page. ## Summary - We collect what we need to run your conversations and your account. - Your messages are stored on our servers so that characters can continue your conversation. Our team does not read conversations as a matter of routine. - To write replies, check messages for safety and keep a short summary of long chats, we send parts of your conversation to AI model providers. Each request identifies you only by a pseudonymous ID, and we request providers that do not store prompts or train on them. - Your conversations are never used to train AI models, and your data is never sold. - We measure visits with our own analytics. If you allow it, Google Analytics also counts visits to some of our public pages. Instamora has no advertising cookies. - You can ask for a copy of your data, or ask us to delete it, at any time. ## What we collect ### When you visit - The pages you open and the steps you take, such as choosing a character, reaching the free-message limit or reviewing an offer, with the time of each step. - How you arrived: the Instamora link you followed, campaign tags in that link and the host name of the site that sent you. If you came from an ad, we note the kind of ad link (for example a Meta, Google or TikTok link), but we never store the click ID itself. - If you open an Instamora link inside an app's built-in browser, such as Instagram's, and then switch to your regular browser, a token in the page address lets us count both visits as one. It never signs anyone in. If you share that address, the person who opens it within two hours may be counted as continuing your visit. - Your device type, operating system and browser family, which we work out from your browser's user agent. We do not store the user agent itself, except with an order (see "When you start a checkout"). - Your country and, where available, your region, which our delivery service works out from your IP address. We do not store the IP address itself. To limit how many free replies one network can get each day, we keep a keyed hash of it for two days. Our delivery service and web servers see the address when they deliver the site and may keep it in their logs for a short time. - The cookies and browser storage described in the [Cookie Policy](https://instamora.com/cookies). - If you allow Google Analytics, what it receives (see "Google Analytics" below). ### When you chat - The messages you send and the replies you receive, for each character. - In a long conversation, a short summary of earlier messages, which a model writes so that the character can keep track of the chat. - Your answers when you set up a match, such as the look, relationship, personality and interests you choose. Quiz answers are recorded in our analytics. - The fact that you confirmed you are 18 or older, and when. - Safety flags that our automatic checks raise on a message, for example a sign that the user may be under 18 or a mention of self-harm. ### When you create an account - Your email address and name, from Google or Apple or from the email address you enter for a sign-in link. If you sign in with Apple, you can choose to share a private relay address that forwards mail to you. - The ID that Google or Apple uses for your account with us, so that we recognize you next time. We do not receive or store passwords. - Your Credits balance and history, the photos you unlock and the gifts you send. ### When you start a checkout - The plan or pack you chose, the price and terms shown to you, each consent you accepted with its exact wording and time, the version of the Terms, your country and region, and your browser's user agent. - Once checkout opens, the payment provider will collect your payment details. We will receive a confirmation and a payment reference. We will not see your full card number. ### When you pay with USDT - The order, the amount in USDT, the TRON network and the time we hold that amount for you. - The payment as the TRON blockchain records it: the address it came from, the amount, the time and the transaction ID. - The result of our sanctions check on the address the payment came from. TRON payments are public on the blockchain. Anyone can see the amount, the time, the sending address and the receiving address of a payment, and anyone who knows that an address is ours can link a payment to Instamora. Nobody, including us, can change or delete what the blockchain records. We never ask for your wallet's private key or recovery phrase. We check every address a payment comes from against the US Treasury's sanctions list (OFAC's Specially Designated Nationals list) and against the list of addresses Tether has frozen. If a payment comes from a listed address, we hold the order and deal with the payment as the law requires. ### When you contact us - Your email address and what you write to us. ### Sensitive information Conversations on Instamora can reveal details about your sex life, sexual orientation or health. We use this information only to run your conversations and to keep people safe. We do not use it for advertising or to profile you outside the service. Where the law asks for your explicit consent to this processing, for example in the EU and the UK, we rely on that consent. In the EEA, the UK and Switzerland, and when we cannot tell where you are, we ask for it when you confirm that you are 18 or older, before your first message. You can withdraw it at any time by writing to [privacy@instamora.com](mailto:privacy@instamora.com). We then delete your conversations, or your whole account if you ask. Please do not share details you do not want stored, such as your full name, home address, financial information or information about other people. ## How we use your data and why The legal bases below are those that apply under the GDPR and the UK GDPR. - To provide your conversations and your account. Data: messages, conversation summaries, match answers, account details, Credits. Legal basis: our contract with you, and your explicit consent for sensitive information. - To write replies. Data: the character's profile, your messages, the conversation summary, pseudonymous IDs. Legal basis: our contract with you, and your explicit consent for sensitive information. - To keep people safe and the service secure: the age lock, self-harm support, safety checks on messages and replies, limits on free use, and abuse and fraud prevention. Data: messages, safety flags, visit records, a keyed hash of your IP address, browser security check results. Legal basis: our legitimate interest in a safe service, and our legal obligations. - To understand and improve the product, for example which pages and offers work. Data: visit records, device type, country and region. Legal basis: our legitimate interest in improving Instamora. In the EEA, the UK and Switzerland we collect less (see below). - To count visits to our public pages with Google Analytics. Data: what Google Analytics receives (see below). Legal basis: your consent, wherever you are. - To handle checkout, accounting and payment disputes. Data: orders, consents, payment confirmations. Legal basis: our contract with you, and our legal obligations. - To take payments in USDT and check them. Data: the order, the address the payment came from, the amount, the transaction ID and the result of the sanctions check. Legal basis: our contract with you, and our legal obligations. - To send sign-in links and messages about the service. Data: your email address. Legal basis: our contract with you. - To answer requests and meet legal duties, such as complaints, removal requests and reports to authorities. Data: what the request needs. Legal basis: our legal obligations and our legitimate interests. We do not send marketing emails. If we start, we will ask for your consent where the law requires it, and every marketing email will let you unsubscribe. ## Analytics in the EEA, the UK and Switzerland When your location is identified in the European Economic Area, the United Kingdom or Switzerland, we use a reduced mode. We do not record page views or the kind of ad link that brought you, we do not issue the app-to-browser token described above, and your browser keeps no queue of analytics events. We still record what we need to run the service and count its use, such as messages sent and orders. Google Analytics runs there, as everywhere, only if you allow it. ## Google Analytics We use Google Analytics, a service of Google LLC, to see how people find Instamora. Your browser sends the visit to instamora.com, and our analytics delivery service passes it on to Google from its servers. It counts visits to these public pages only: the home page, the list of characters, How it works, Pricing, FAQ, Safety and About. It does not run on any other page, including every page of the app (your chats, your account, checkout, wallet and payments) and our internal tools. - Consent: Google Analytics runs only if you allow it, wherever you are. On your first visit, a cookie bar at the bottom of the page asks you. Until you allow Analytics there, nothing is sent to Google. - Your choice: we keep it in the `im_cookies` cookie and our analytics delivery service keeps it in the `zaraz-consent` cookie, each for one year. You can change it at any time with "Cookie settings" in the footer of our pages, and the change applies from then on. - What Google receives: the address and title of the page (without anything after a question mark), the address of the website that sent you (without the page you came from), your browser's language, screen size and user agent, and a random ID kept in a cookie on instamora.com. Our analytics delivery service does not pass on your IP address. Google does not receive your messages, your account details or your payment details. - Retention: Google keeps the data about each visit and each visitor for 14 months and then deletes it. Reports that only count visits can be kept longer. - Where: Google processes this data in the United States, under the data processing terms we accepted for Google Analytics. We have turned off Google's use of this data for advertising. The [Cookie Policy](https://instamora.com/cookies) lists the cookies Google Analytics uses. ## Who we share data with We share personal data only with the service providers that help us run Instamora, and only what each of them needs: - AI model providers and their routing service, to write replies, check messages and replies for prohibited content and summarize long conversations. They receive the character's profile, the messages each task needs and pseudonymous IDs for you and for the conversation. We request providers that do not store prompts or train on them. - Our content delivery and security provider, for browser checks, DNS, character media storage and analytics delivery. It handles your IP address and requests when you load the site. - Google, for Google Analytics, if you allow it (see "Google Analytics" above). - Our hosting provider, for our servers and database. - Google and Apple, if you sign in with them. They confirm who you are and send us your name and email address under their own privacy policies. - An email delivery provider, for sign-in links and messages about the service. - Our email routing and mailbox providers, for the email you send to our addresses. - A payment provider, once checkout opens, for payments, fraud checks and refunds. We will name it on this page before checkout opens. - TronGrid, a service that reads the TRON blockchain. We use it to find and confirm payments to our address and to check sending addresses against Tether's list. It sees the addresses we ask about. - An age-check provider, if we add one. We will name it on this page before we use it. We also share data when the law requires it, for example in response to a valid court order, or to report content that sexualizes a minor to the National Center for Missing & Exploited Children (NCMEC). We may share data to protect someone from serious harm. If Instamora is sold or merged, your data may move to the new owner, who must keep to this policy. We do not sell personal data, and we do not share it for cross-context behavioral advertising. ## Where your data is stored Instamora and its providers may store or process your data outside your country. Google processes Google Analytics data in the United States. For transfers from the EEA, the UK or Switzerland to a country without an adequacy decision, we use the safeguards the law provides, such as standard contractual clauses. ## How long we keep data - Account details: until your account is deleted. - Conversations, their summaries and match answers: while your account exists, so that characters can continue your conversation. We delete them when you ask us to or when your account is deleted. - Guest conversations: a guest conversation is linked to the guest cookie, which expires 90 days after it is set. After that the conversation can no longer be opened. We delete guest conversations at the latest 400 days after the guest session started, or sooner if you ask (see "Your rights"). - Browser session records, which hold your age confirmation, the age lock, the version of the site you see and how you first arrived: until your account is deleted or you ask us to delete them. - Analytics events: up to 400 days. - Google Analytics data: 14 months at Google, then deleted. Reports that only count visits can be kept longer. - Visit records: up to 400 days, except the first recorded visit of each browser and visits linked to an account or an order. We keep those as long as the browser's session record, the account or the order. - Safety flags: up to 400 days. The age lock itself stays on the browser's session record and on the account, so it keeps working after the flags are deleted. - Orders, payments and the Credits ledger: as long as tax and accounting rules require. If your account is deleted, we keep these records with your identifiers replaced by a random code. - Emails you send us: as long as we need them to handle your request and any follow-up. - Backups: deleted data can remain in backups until those backups are replaced. ## Your rights Wherever you live, you can ask us to: - give you a copy of your personal data; - correct data that is wrong; - delete your data; - stop using your data for analytics. If you are in the EEA, the UK or Switzerland, you can also ask us to restrict or stop some processing, receive your data in a portable format, withdraw your consent at any time and complain to your data protection authority. If you live in a US state with a privacy law, such as California, you have the right to know what we collect, to delete it, to correct it and to limit the use of your sensitive data. We do not sell personal data, share it for targeted advertising or track you on other websites, so there is nothing to opt out of. Browser signals such as Global Privacy Control and Do Not Track therefore do not change what we collect. Using these rights will not change how we treat you. To make a request, write to [privacy@instamora.com](mailto:privacy@instamora.com) from the email address linked to your account. We may ask you to confirm the request from that address. We answer within one month, or sooner if your local law sets a shorter deadline. Where the law allows it, an authorized agent can make a request for you. When we delete an account, we delete its messages, conversation summaries, match answers, sign-in identities, email address and name. In our analytics and usage records we replace the account's identifiers with a random code that cannot be linked back to you. Order and Credits records stay under that code for accounting. If you used Instamora only as a guest, your conversation is linked to a cookie in your browser, not to your name or email address. To have it deleted, sign in from the same browser so that the conversation moves into an account, then ask us to delete that account. You can also write to us, and we will work out with you how to identify the browser. ## Security We use HTTPS and secure, HTTP-only session cookies. You sign in through Google, Apple or a one-time link, so we hold no passwords. Only the people who run Instamora can access production data. Requests to model providers carry pseudonymous IDs and no account details. No system is completely secure. If a data breach affects you, we will tell you and the authorities as the law requires. ## Children Instamora is only for adults. We do not knowingly collect data from anyone under 18. If we learn that a user is under 18, we lock the chat, and we may close the account and delete its data, except records the law requires us to keep. If you believe a minor is using Instamora, write to [abuse@instamora.com](mailto:abuse@instamora.com). ## Changes to this policy We post every update on this page with a new date and version. If a change affects how we use data you have already given us, we tell you by email or in the service before it applies. ## Contact Privacy questions and requests: [privacy@instamora.com](mailto:privacy@instamora.com). Other addresses are on the [contact page](https://instamora.com/contact).