Privacy

Draft — last updated 18 August 2026.

What we collect and why

• Public Instagram content for the handle you paste — bio, captions and photos — used solely to build your preview and (if you publish) your site.
• Your email when you buy (via Stripe) or join the waitlist — used for receipts, verification and service messages. No marketing without your say-so.
• Abuse-prevention counters — we count requests per network address using a salted hash; we do not store raw IP addresses for this.
• Analytics — lightweight, cookie-free page analytics (Plausible) to see which pages work. No cross-site tracking, no advertising identifiers.

How long we keep things

Preview links expire after 7 days. Preview source data is retained briefly for quality and abuse review, then removed on request or on a rolling basis. Published-site content is kept while your site is live. Payment records are kept as required for accounting.

Who touches the data

Our processors: Stripe (payments), Supabase (database and storage), Vercel (hosting), Cloudflare (bot protection), Anthropic (the AI that reads your public profile to draft your site), Plausible (analytics). We don’t sell data to anyone.

Deleting your data

Ask us to delete everything at any time — see delete your data for exactly what goes and how to request it. If you bought a site we must keep the sales record (amount, date, payment references) for HMRC, but not the identity attached to it: your email, Instagram handle and web address are replaced with random placeholders that cannot be reversed. If you remove our app from your Instagram account, Meta notifies us and the deletion runs automatically.

Your rights

Want a preview or any of your data removed? Email hello@onshow.ai — removal requests are honoured within 24 hours, whether or not you’re a customer.

Cookies

Essential ones only (e.g. the bot-protection check). Analytics are cookie-free.