Privacy policy

Who we are

Ecomyard, Willemsplein 21, 6811 KB Arnhem, the Netherlands (KVK 96480556), runs the service and this website and is the controller for the personal data described here. Questions about your data: hello@ecomyard.com.

What we collect

Account data: your name, email and login details. Workspace content: the briefs, creatives, files, affiliate and payout records your team puts in. Creator data: what affiliates share through applications and their portals, such as name, handle, country and delivered content.

Usage data: basic product analytics like which pages are used, plus technical logs to keep the service secure and debuggable.

Data from Facebook and Instagram

Ecomyard reads data from Meta only after a brand connects its own Instagram professional account in Ecomyard, by signing in with Instagram (Instagram, under Connections). From that account it reads the account's username and id; the public posts, reels and carousels other accounts tagged the brand in, mentioned it in the caption of, or published as a collab the brand accepted, with each post's media, caption, author's username, time, and like and comment counts; and stories that mention the brand, with their file and who posted them and when: the account's username, name, profile photo and follower count, as Instagram shares them with the brand when a story mentions it.

Only for a brand that connects through a Facebook login as well, Ecomyard reads the public profile of business and creator accounts through Meta's Business Discovery: for the brand's affiliates their bio and follower count, to check the brand's house rules, and for accounts that tag the brand or that the brand looks up by handle, their name, bio, follower and post counts, profile photo, and the likes and comments on their recent posts, to help the brand decide whom to invite. A brand connected with Instagram alone gets none of this.

Ecomyard uses this to show the brand the content made about it, per creator with its likes and comments; to keep the files of tagged posts and stories in the brand's own Google Drive; to list creators the brand may want to invite; and, with a Facebook login, to check affiliates' bios against the brand's house rules. All of it is visible to that brand's workspace only. Data from one brand is never shown to another.

Ecomyard does not post, comment, reply or send messages for the brand. It does not read the brand's direct messages: Instagram delivers a story that mentions the brand as a message, Ecomyard keeps those mentions and drops every other message unread. It does not sell data from Meta, share it with advertisers or data brokers, use it for advertising or to profile people outside the brand's own program, or use it to train AI models.

This data is stored in Ecomyard's database (Supabase, EU region). The file of each tagged post, and of each story that mentions the brand, is copied into the brand's own Google Drive while Instagram still serves it, and Ecomyard keeps no copy of the file on its own servers. The access token is deleted the moment the brand disconnects, and so are the public profiles of accounts that are not the brand's affiliates, which are otherwise read again weekly. Tagged posts and their counts stay with the brand's workspace until the brand removes them, deletes the workspace, or asks us to delete them.

Ecomyard's use of information received from Meta's APIs follows the Meta Platform Terms and Developer Policies. Instagram and Facebook are trademarks of Meta Platforms, Inc.; Ecomyard is not affiliated with or endorsed by Meta.

Why we process it

To run Ecomyard for your workspace: showing your board, paying your affiliates, sending the notifications you configured. We do not sell personal data and we do not use your workspace content to train AI models.

Where it lives

Data is stored with our infrastructure providers Supabase (database and file storage) and Vercel (hosting), in EU regions where available. Other processors each do one job: Resend delivers our email, PayPal sends affiliate payouts when a workspace pays through it, and Anthropic runs the AI assistant on the workspace data you ask it about. Files a workspace keeps in Google Drive, including copies of tagged posts, live in that workspace's own Drive, under its own Google account.

Our public signup, account and contact pages carry Google reCAPTCHA, the tickbox that says you are not a robot. Loading it sends your IP address and some information about your browser to Google, who use it to tell a person from a script. It runs on those pages only, and only there because an open form on the internet is otherwise filled in by machines all day. Google's terms and privacy notice apply to that check.

How long we keep it

As long as your workspace exists. Delete your workspace and its content is removed from production systems; backups roll off on a fixed schedule after that.

Deleting your data

Brands using Ecomyard: disconnect Instagram under Connections to stop all reading from Instagram. The access token and the Discover profiles are deleted at once. To have everything else Ecomyard read through Meta deleted as well, meaning tagged posts, their counts, story mentions and bio checks, email hello@ecomyard.com from the workspace owner's address and we delete it within 30 days; deleting the workspace deletes it too. Removing Ecomyard in Instagram, under Settings, Website permissions, Apps and websites, also stops our access. A data deletion request sent from there reaches us as well, and we carry it out within 30 days; emailing us works too. Copies of tagged posts and stories in your Google Drive are yours: delete them in Drive.

Creators, and anyone else whose public posts, stories or profile appear in a brand's workspace: email hello@ecomyard.com with your Instagram handle, and the brand if you know it. We delete your posts, story mentions and profile data from Ecomyard within 30 days and let the brand know. For Discover, the brand then keeps only your handle, so you are not shown again. Copies a brand saved in its own Google Drive are that brand's; ask the brand to delete them.

We confirm every deletion request by email once it is done.

Your rights

You can access, correct, export or delete your personal data. Workspace admins handle their team's and creators' data inside the product; for anything else, email hello@ecomyard.com and we respond within 30 days. EU users can also complain to their local data authority.

Cookies

Ecomyard uses functional cookies for signing in and remembering preferences like your theme; those are required for the site to work and need no consent. Optional analytics only run after you accept them in the cookie banner. Your choice is stored for 180 days and you can change it any time via Cookie settings in the footer. No third-party advertising cookies, ever.