Privacy Policy

InstaVeil (“we”, “us”), operated at instaveil.com, provides an anonymous viewer for public Instagram profiles. We do not require an account. This policy describes how information is handled when you use this service.

1. Data we process

Lookups you type

When you search a username, that string is sent to our servers so we can fetch publicly available Instagram profile data. We do not use it to create a user profile about you.

Local storage on your device

Recent searches, saved profiles, Veil Event Graph history, cookie consent, and an opaque Veil wallet credential can be stored in your browser. InstaVeil does not require an Instagram login. A Veil Recovery Key is an export of the wallet credential; anyone who has that key can restore the associated paid access, so you should protect it like a password.

Contact form

If you submit the Contact form, we process the name, email, and message you provide, solely to respond, at info@instaveil.com.

Veil Lens AI

When you press Ask Veil Lens, we send your question, answer language, and a limited sample of the selected public profiles and post text to xAI to generate an answer. If you enable image analysis, up to four available public images are also included. We do not send your saved profile history, IP address, or other saved briefings to the model. Please avoid including personal or confidential information in questions.

Lens answers and questions may remain in server memory for up to ten minutes to avoid repeated generation. Saved briefing questions stay in this browser until you remove them or clear browser storage. A server ledger stores only the daily AI request count for cost control. Temporary keyed hashes of network addresses enforce request limits and expire after fifteen minutes. AI requests disable response storage for later API retrieval; xAI’s own processing and retention policies still apply.

Veil AI Agent

When you ask the Veil AI Agent a question, the question and current InstaVeil page are sent to xAI when the AI provider is available so the agent can recommend the most relevant InstaVeil tools and guides. If the AI provider is unavailable, a local routing fallback can answer without sending the question to xAI. The agent does not receive your saved watchlist or local browsing history.

To improve recommendations over time, InstaVeil stores aggregate counts showing how often an agent recommendation was displayed and how often a recommended InstaVeil route was opened. These learning records do not store the question, username, IP address, or a visitor profile. Random event identifiers are used only to avoid counting the same recommendation display or click twice. Small samples are not used to change ranking.

PayPal payments and donations

If you buy a VeilPass, Veil Credits, a VeilWatch subscription, or donate, PayPal processes the payment for the merchant account nikoslioli@yahoo.gr. InstaVeil stores the minimum payment linkage needed to deliver paid access, such as the PayPal order or subscription identifier, purchased SKU, amount/currency, entitlement state, and an opaque Veil wallet ID. The wallet secret itself is stored server-side only as a one-way SHA-256 hash. We do not receive or store your card number or PayPal password. PayPal’s processing is governed by PayPal’s Privacy Statement.

Technical logs

Hosting infrastructure may record standard server logs (IP address, user agent, timestamp, requested path) for security and reliability. We do not sell log data.

2. Instagram content

Profile photos, captions, and media are requested from public Instagram surfaces and shown to you. That content belongs to Instagram users and to Meta. InstaVeil does not claim ownership. See the Disclaimer.

3. Cookies and optional advertising

Essential browser storage remembers your cookie choice, saved profiles and local viewing preferences. Optional third-party advertising is separate: InstaVeil loads the configured advertising runtime only after you choose Allow optional ads.

Depending on which advertising placements are configured, an ad provider may process technical information such as IP address, browser/device information, page context and interaction data, and may use cookies or similar technologies for ad delivery, fraud prevention, frequency capping, measurement and, where permitted, personalization.

You can switch back to essential-only storage at any time from the Cookie & Advertising Settings page. Ad delivery can also be affected by geography, browser privacy settings, ad blockers, provider inventory and the provider's own eligibility rules.

InstaVeil publishes a Google ads.txt seller declaration for its publisher account. That declaration alone does not load Google AdSense. If Google advertising is enabled, its use is subject to the applicable consent and Google policy requirements. See Google Privacy Policy and How Google uses information from sites that use its services.

4. Legal bases (EEA/UK)

Where GDPR applies: legitimate interests for running a public lookup tool and security logs; consent for advertising cookies; and contractual necessity for delivering paid Veil features, verifying PayPal entitlements, and maintaining the credit balance you purchase.

5. Retention

Local storage remains until you clear it. Veil payment and entitlement records are kept as needed to provide purchased access, prevent duplicate crediting, handle disputes, and meet accounting or legal obligations. Server logs follow our host’s standard rotation. Contact messages are kept only as long as needed to handle the request. PayPal retains payment records under its own policies.

6. Sharing

We share data with infrastructure providers that host this site, with configured advertising providers only when optional advertising is allowed, and with PayPal when you make a payment or donation. We do not sell personal information.

7. Children

InstaVeil is not directed at children under 13 (or the age required in your country). We do not knowingly collect data from children.

8. Your rights

You may access, correct, or delete personal data we hold (for example a contact message) by writing through the Contact page. You can also clear local storage in your browser. You may lodge a complaint with your local data protection authority.

9. International transfers

Our hosts, configured advertising providers, and PayPal may process data in the United States and other countries. Where required, they use appropriate safeguards.

10. Changes

We may update this policy. The “Last updated” date at the top of the page is the current version (September 30, 2026).

11. Contact

Privacy requests: Contact InstaVeil or email info@instaveil.com.