Privacy policy

Lurkfish analyzes public Instagram and TikTok content — posts and comments on accounts our customers choose to track — and produces weekly intelligence briefs. This policy explains what we collect about our customers and about the public content we analyze.

We collect only public data (posts, captions, comments, follower counts) through licensed third-party data providers. We operate read-only: we never post, follow, message, or interact, and we never access private accounts or ask anyone for platform credentials.

We do not store commenter identities. At ingestion, the commenter's username is replaced with a salted one-way hash whose only purpose is spam de-duplication. Evidence quotes shown in the product display the comment text, its like count, and which tracked brand's post it appeared on — never who wrote it. Because we hold no identities, author-level lookups or exports are impossible by design.

For customers we store: email address, organization and workspace names, tracker configuration, and billing state. Card payments are processed by Lemon Squeezy (merchant of record); crypto payments by NOWPayments. We never see full card numbers or wallet keys.

Product analytics (page events like "brief opened") and error monitoring run on PostHog and Sentry respectively, tied to your account email, used only to improve the product.

Raw posts and comments are pruned automatically per your plan's history window (3, 12, or 24 months). Deleting a tracked account, tracker, or workspace permanently removes its collected posts, comments, and analyses; quotes embedded in already-delivered briefs are redacted. If your subscription lapses, your data is retained for 60 days and then deleted.

Data subject requests: email support and we will act on them. Note that requests about a specific commenter are impossible to fulfil by design — we cannot search by author because we store no authors.

We do not sell data. We do not train AI models on your data or on collected platform data — analysis models are used at inference time only. We do not build advertising profiles.

Privacy questions: reply to any Lurkfish email or write to the support address in your account. We answer ourselves — there is no ticket robot.