Privacy Policy

Last updated: 6 October 2026

Who is responsible for your data

The controller of your personal data is Raposo Consulting S.L. (CIF B09631359), with registered address at [Registered address], which operates Follist (“we”). You can contact us about privacy at any time at hello@follist.com.

What Follist does not access

Follist only works with information that is publicly visible on Instagram. We never ask for or use your Instagram password, cookies, private messages or logged-in session, and we cannot see private accounts.

Data we collect about you

• Account data: your email address, optional name, encrypted password, language and notification preferences.
• Usage data: the public Instagram usernames you add, the checks you run, the reports you create and your Signal balance and history.
• Billing data: your plan, payments and invoices. Card details are entered directly with our payment provider, Stripe; we never see or store your full card number.
• Support data: the messages you send us through the contact form or by email.
• Technical data: IP address, browser information and security logs, used to protect accounts and prevent abuse.

Public data about Instagram accounts

To compare following lists over time, Follist stores snapshots of the public list of accounts that a public Instagram profile follows: usernames, display names, profile pictures and the date each change was detected. We only process what Instagram shows publicly, we use it only to provide the comparisons requested by our customers, and we do not sell it or use it for advertising.

If you appear in this data and want to object to its processing or ask for it to be deleted, write to hello@follist.com and we will handle your request.

Why we use your data and on what legal basis

• To provide the service you signed up for (account, checks, reports, Signals, support): performance of our contract with you (art. 6.1.b GDPR).
• To charge for the service and keep accounting records: performance of the contract and compliance with our legal obligations (art. 6.1.b and 6.1.c GDPR).
• To keep Follist secure and prevent fraud and abuse, and to process public profile data for the comparisons: our legitimate interests, balanced against your rights (art. 6.1.f GDPR).
• Service emails (account confirmation, password reset, results of your checks, billing notices): performance of the contract. You can switch off non-essential notifications in Settings. We do not send marketing emails without your consent.

Who we share data with

We only share data with providers that help us run Follist, under contracts that oblige them to protect it and use it only on our instructions:

• Stripe — payment processing and invoicing.
• Data-collection providers (such as Apify) — to read public Instagram profiles and following lists when you run a check.
• Hosting and email providers — to run our servers and send service emails.

We do not sell personal data. We may disclose data when required by law or by a competent authority.

International transfers

Some providers may process data outside the European Economic Area. In those cases the transfer is protected by an adequacy decision of the European Commission or by the Commission’s Standard Contractual Clauses.

How long we keep data

• Account and usage data: while your account is active. When you delete your account, we delete your watchlist, reports and personal details.
• Billing records: for the period required by tax and commercial law (generally six years), with no other use.
• Snapshots of public following lists: while they are needed to provide comparisons, and deleted when no customer needs them any more.
• Security logs: up to 12 months.

Your rights

You can request access to your data, its rectification or deletion, the restriction of its processing, its portability, and object to processing based on legitimate interests. Write to hello@follist.com from the email address of your account. You can also delete your account yourself in Settings.

If you believe we have not handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the data protection authority of your country.

Cookies

Follist only uses cookies that are necessary for the site to work: a session cookie to keep you logged in and protect forms, and a cookie that remembers your language. When you pay, Stripe sets its own cookies to prevent fraud. We do not use advertising or analytics cookies, so we do not ask for cookie consent.

Security

Passwords are stored encrypted, all connections use HTTPS, and access to our systems is restricted. No system is completely secure, but we work to protect your data and will notify you and the authorities of any breach as required by law.

Minors

Follist is intended for people aged 18 or over. We do not knowingly collect data from minors.

Changes to this policy

If we make important changes, we will tell you by email or in your account before they apply. The date at the top shows the latest version.