Rep AI (“Rep AI”, “we”, “us”) operates the service at repaiagent.com, which finds brand sponsorship opportunities for creators, contacts those brands on the creator’s behalf, negotiates to a floor price the creator sets, and measures how the resulting posts performed. This policy explains how we handle personal information in the course of doing that.
1. Who we are
Rep AI is a service of 1603034 B.C. LTD., a company incorporated in British Columbia, Canada. For any privacy question, request, or complaint, write to hello@repaiagent.com. We answer privacy requests within 30 days.
2. What we collect
Account information
- Your email address and a hashed password (we never store the password itself).
- The invite code you used, and when you accepted these terms.
Information you give us about your work
- Your minimum price per post (your “floor”) and your negotiation range.
- The brand categories you want pitched, and any brands you never want contacted.
- Your preferred voice and content settings, and any phrases you never want used.
- Links you want included in posts.
Instagram information
If you connect your Instagram professional account, you authorise Rep AI through Instagram’s own login screen, which tells you what you are granting before you grant it. We request only these permissions:
| Permission | What we read | Why |
|---|---|---|
instagram_business_basic | Your Instagram account ID, username, account type, profile picture, follower count, and the media you have posted (including captions, media URLs and timestamps). | To identify your account, to show a brand who they are being introduced to, and to know which post belongs to which deal. |
instagram_business_manage_insights | Performance metrics for your account and your posts — reach, impressions, views, likes, comments, saves, shares, profile visits and link clicks. | To measure what a sponsored post actually did, and to send the brand a report so you can be booked again at a fair price. |
We do not read your direct messages. We do not post, comment, or send messages from your Instagram account. We do not request access to any account other than yours, and we do not pull data about other creators.
Sponsorship correspondence
Rep AI sends outreach to brands from a Rep AI-operated email domain, clearly identified as Rep AI writing on your behalf. We store those messages, the brand’s replies, the offers made, and the outcome of each negotiation. This includes the business contact details of the brand representatives we correspond with.
Technical information
Our hosting and database providers log IP addresses, browser type and request times for security and abuse prevention. We do not run advertising trackers, and we do not sell or share your information with data brokers.
3. Snapshots we keep permanently — read this one
When you post a sponsored piece of content, Rep AI records its performance at three moments: one day, one week, and one month after posting. Each of those readings is stored as a fixed snapshot and is not updated afterwards, and is not deleted on a schedule.
That is deliberate and you should understand why before you connect your account. Instagram’s own insights shift over time. A brand deciding whether to book you again needs a number that does not move, and you need to be able to show what a post did in the window the brand paid for — months or years later. A snapshot that expires is a receipt you cannot produce.
These snapshots are aggregate performance figures about your own posts. They contain no information about the people who viewed, liked or commented. You can have them deleted at any time — see deleting your data. Deleting them is permanent; the historical readings cannot be recovered or recomputed afterwards.
4. How we use it
- To find brands that plausibly pay creators in your categories and at your size.
- To write and send outreach on your behalf, and to answer the replies.
- To negotiate against the floor you set, and to bring you offers for approval.
- To draft post scripts and captions, including the advertising disclosure the law requires.
- To measure posts at the three windows above and report those results to the brand.
- To operate, secure, debug and support the service.
We do not use your Instagram data to train machine-learning models, and we do not sell your personal information to anyone, for any purpose.
Automated processing
Rep AI uses automated systems, including third-party AI language models, to qualify brands, draft outreach and drafts of post copy. No automated decision commits you to anything: an agreement with a brand is only entered into when you approve it yourself in the app.
5. Who else sees it
- Brands you are being pitched to — receive your public creator profile, your Instagram handle and follower count, and, after a sponsored post, the performance figures for that post. They never receive your email password, your floor price, your other negotiations, or metrics for posts they did not sponsor.
- Service providers we depend on to run Rep AI: cloud database and authentication hosting, web hosting, email sending and inbox infrastructure, and AI model providers. Each is bound to use the data only to provide their service to us.
- Legal — if we are required by law to disclose information, or need to in order to protect our rights or someone’s safety.
Some of these providers process data outside Canada, including in the United States. Where that happens, the information is subject to the laws of that country.
6. How long we keep it
| Data | Kept |
|---|---|
| Account and settings | While your account is open, then deleted within 30 days of closure. |
| Instagram access token | Until you disconnect or revoke it, or it expires. Deleted immediately on disconnect. |
| Instagram profile and media records | While your account is open, then deleted within 30 days of closure. |
| Performance snapshots (+1d / +1w / +1mo) | Kept indefinitely as a record of completed deals — see section 3 — unless you ask us to delete them. |
| Brand correspondence and deal records | Kept for 7 years after the deal closes, as business and tax records. |
| Server and security logs | Up to 90 days. |
7. Your choices and rights
- Turn it off. Every agent except measurement has an on/off switch in the app. Switching outreach off stops new pitches immediately.
- Disconnect Instagram at any time, from Rep AI’s settings or from Instagram itself (Settings → Apps and websites → Remove). We delete the access token and stop collecting new data the moment we are told.
- Access, correct, or delete your personal information — see deleting your data, or write to hello@repaiagent.com.
- Withdraw consent to our handling of your information, understanding that it will end your ability to use Rep AI.
- Complain. If we have not resolved something to your satisfaction, you may complain to the Office of the Privacy Commissioner of Canada, or to your local data protection authority.
8. Security
Data is encrypted in transit and at rest. Every record is scoped to the creator it belongs to and enforced at the database level, so one creator’s data cannot be read from another creator’s session. Instagram access tokens are stored encrypted and are never exposed to the browser. Access to production data is limited to the people who need it to operate the service.
No system is perfectly secure. If a breach affects your information in a way that creates a real risk of significant harm, we will notify you and the appropriate regulator as the law requires.
9. Children
Rep AI is not for anyone under 18, and we do not knowingly collect information from anyone under 18. If we learn we have, we delete it.
10. Changes
If we change this policy in a way that materially affects how we handle your information, we will email you before it takes effect. The date at the top always reflects the current version.
11. Contact
Rep AI is an independent service. It is not affiliated with, endorsed by, or sponsored by Meta Platforms, Inc. Instagram is a trademark of Meta Platforms, Inc.