This Privacy Policy (hereinafter referred to as the "Policy") outlines how personal data is collected, processed, and protected when you use our website, application, and platform located at https://storytrip.app (hereinafter referred to as the "Service").
The Service and the brand name "StoryTrip" are fully owned and operated by Sole Proprietor Vinichenko Aleksandr Sergeevich (Registered in the Russian Federation under INN: 773600869313 and OGRNIP: 324774600171505), hereinafter referred to as the "Company", "we", "us", or "our".
2. Information We Collect
We collect the following information:
Instagram Username — provided voluntarily by you to link your account for Story verification.
Account Verification Data (partner restaurants) — for venues that connect their Instagram Business or Creator account via Instagram Business Login: Instagram Professional ID, username, and profile picture.
Insights and Metrics (partner restaurants) — public metrics of your posts and Stories (such as timestamps, media type, and mention/tag status) used to confirm that a tourist's Story tagged your venue.
Coupon Activity — records of coupons claimed and redeemed within the app.
Story-Mention Profile Snapshot — when you tag a partner venue in an Instagram Story, we read and store your Instagram user ID, follower count, and display name at that moment, plus whether you already followed the venue's account. This is a one-time snapshot, not continuous monitoring.
We do NOT collect or store: your Instagram password, any part of your inbox other than the Story mentions sent to your account, or the Story media itself — we keep only the temporary link, which expires within 24 hours.
3. How We Use Your Information
To verify that a tourist has posted an Instagram Story tagging a partner venue.
To activate reward coupons upon successful Story verification.
To display your coupon status to venue staff during redemption.
To calculate aggregate performance metrics (such as reach or mention frequency) and present them to partner restaurants in their partner dashboard.
We do not sell, rent, or share your personal data with third parties.
4. Instagram API & Meta Platform
Our app uses the Instagram API to receive Story mention notifications from connected business accounts. We access the data needed to verify Story tags and to show the venue who mentioned it. When a guest mentions your venue in a Story, you can reply to that guest by hand from your Partner Cabinet, inside the standard 24-hour window of Instagram — every reply answers a message the guest sent first. We never post content on your behalf.
Coupon and user data is stored securely on encrypted cloud servers hosted on Render.com and Supabase. We retain Instagram-sourced data (account ID, username, Story-mention status) for as long as your partner account is active, to power coupon verification, redemption history, and dashboard reporting. Instagram access tokens are stored securely and used solely for receiving mention notifications; they are deleted immediately when you disconnect your account.
6. Your Rights
You may disconnect your Instagram account at any time via Instagram Settings → Apps and Websites.
You may request deletion of your data by contacting us at the email below.
You may update your Instagram username at any time within the app.
7. Cookies
We use localStorage in your browser to remember your Instagram username and language between sessions. Only if you click “Accept” in the cookie banner, we also load Google Analytics, Meta Pixel and Microsoft Clarity — they set cookies to measure visits, show how the app is used and measure our ads on Instagram and Facebook. Your Instagram username is never sent to them. If you decline, none of these load. You can change your choice at any time with the “Cookie settings” button below.
8. Children's Privacy
Our service is not directed to children under 13. We do not knowingly collect personal information from children.
10. Meta Data Deletion Instructions
In accordance with Meta Platform Terms, you can request deletion of your data at any time using either method below:
Disconnect from Instagram — go to Instagram → Settings → Apps and Websites, find StoryTrip, and remove it. This automatically sends a secure request to our server, which deletes your account ID and access token within minutes, immediately cutting off our access to your Instagram account. Story-mention and coupon records tied to your venue are kept as a business record (see Section 5) — to have those deleted too, use the email option below.
Legal Entity: Sole Proprietor Vinichenko Aleksandr Sergeevich (Индивидуальный предприниматель Виниченко Александр Сергеевич)
Taxpayer Identification Number (INN): 773600869313
Primary State Registration Number (OGRNIP): 324774600171505
Registered Business Address: Moscow, Russian Federation (Российская Федерация, Москва) — Note: Full street address is restricted in the public registry for privacy protection.