HumanSkin.

Privacy Policy

Last updated: August 30, 2026

This Privacy Policy explains how HumanSkin (operated by Kerry Marin, "we", "us" or "our"), available at humanskin.ai, collects, uses, stores and protects information when you use our website and our social media management services (the "Service"). The Service allows clients to connect an Instagram professional account so that we can publish content, manage comments and manage direct messages on their behalf.

By using the Service you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Who we are

HumanSkin is a social media management service for content creators and businesses. You can contact us at humanskinstudios@gmail.com for any privacy-related question or request.

2. Information we collect

2.1 Information you provide directly

  • Account and contact data: your name, email address and business details when you sign up, contact us or purchase a plan.
  • Billing data: payments are processed by our payment providers (e.g. Paddle, or Fiverr for orders placed there). We do not store your full card details; we receive limited billing information such as your name, email and subscription status.
  • Content and preferences: media files, persona details and instructions you provide so we can operate your account.

2.2 Instagram data (via the Meta Platform)

When you connect an Instagram professional account to the Service, you authorize us — through Instagram's official login and Meta's official API — to access certain data from that account. Depending on the permissions you grant, this may include:

  • Basic profile information of the connected account (username, account ID, profile picture, follower counts and similar metadata);
  • Media objects and publishing capabilities (to schedule and publish posts, Reels and Stories on your behalf);
  • Comments on the connected account's media (to read and respond to comments on your behalf);
  • Direct messages sent to the connected account (to respond to people who message the account first), including message text and the sender's username or app-scoped identifier;
  • Aggregated insights and metrics (reach, impressions, engagement) used to build your performance reports.

Access tokens issued by Meta are stored encrypted at rest. Your Instagram password is never seen, transmitted to or stored by us — authentication happens entirely on Meta's own login screens.

2.3 Information collected automatically

  • Standard technical data such as IP address, browser type and pages visited, collected through server logs and our hosting provider for security and reliability purposes.

3. How we use information

  • To provide, operate and maintain the Service;
  • To publish content, respond to comments and respond to direct messages on the connected Instagram account, as instructed and authorized by the account owner;
  • To generate captions, replies and reports. For this purpose, relevant content (such as media descriptions, comments and message text) is processed by AI service providers (e.g. Anthropic's Claude API) acting as data processors on our behalf;
  • To produce analytics and monthly performance reports;
  • To process payments and manage subscriptions;
  • To comply with legal obligations and enforce our Terms of Service;
  • To communicate with you about the Service.

We do not sell personal information. We do not use Instagram data for advertising, profiling unrelated to the Service, or any purpose other than operating the Service for the account owner.

4. How we share information

We share information only with service providers that help us operate the Service, under contracts that limit their use of the data:

  • Meta Platforms, Inc. — API calls required to operate the connected Instagram account;
  • Supabase — database and file storage;
  • Vercel — website hosting;
  • Anthropic — AI text generation used to draft captions and replies;
  • Paddle / Fiverr — payment processing, depending on where you purchased.

We may also disclose information if required by law, or to protect the rights, safety and property of HumanSkin, our clients or others.

5. Data retention

We keep client account data for as long as your account is active and as needed to comply with legal obligations. Instagram access tokens are deleted immediately when you disconnect. Other Instagram data (message logs, comment logs, stored media and reports) is deleted automatically within 90 days after disconnection — or earlier on request — as described in Section 6.

6. Disconnecting Instagram and deleting your data

You can revoke our access to your Instagram account at any time:

  • Visit our Disconnect page (or, once your client portal is activated, use its disconnect option); or
  • Remove the HumanSkin app from within Instagram — in the Instagram app, open Settings and look for "Apps and websites" (under "Website permissions"; the exact menu location can vary by app version); or
  • Email us at humanskinstudios@gmail.com.

When you disconnect, we delete the stored access tokens immediately, and all remaining data associated with the connected account (stored media, message and comment logs, reports) is deleted automatically within 90 days. You may also request immediate deletion of all data associated with your account; we complete such requests within 30 days, except for records we are legally required to keep (e.g. billing records).

7. Security

  • Instagram access tokens are encrypted at rest;
  • All traffic is served over HTTPS;
  • Webhook endpoints verify cryptographic signatures before processing any payload;
  • Access to production data is restricted to authorized personnel only.

No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we work to protect your data with industry-standard measures.

8. International data transfers

We operate internationally and our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards offered by our providers for such transfers.

9. Age requirement

The Service is intended for adults. We do not knowingly provide the Service to, or collect personal information from, anyone under 18 years of age. If we become aware that a person interacting with a managed account may be a minor, automated conversations with that person are ended and no promotional links are shared.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete or export your personal information, and to object to or restrict certain processing. To exercise any of these rights, email humanskinstudios@gmail.com. We will respond within 30 days.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be communicated to active clients by email.

12. Contact

HumanSkin · Kerry Marin
Email: humanskinstudios@gmail.com