Privacy

Last updated 4 October 2026.

Riverlamp is built and run by Karyu Labs (we, us). This page explains what we collect, why, and how to have it deleted. Contact us at hello@karyulabs.com.

What we collect

• Free lookups. The username you type and the public numbers Instagram shares for Creator and Business accounts: followers, post counts, likes and comments. We keep a lookup for 24 hours. To limit free lookups we keep a one way hash of your IP address for the month, which cannot be turned back into the address.
• The early access list. Your email, and if you give them, your Instagram username and the kind of work you do. We also note which link or campaign brought you, your country and city as worked out by our host from your connection, and your personal referral code, so we can invite people in order. Nothing else.
• Your account. Your email, and if you choose, your WhatsApp number and the kind of work you do.
• A connected Instagram account. When you connect your own Creator or Business account, we read its posts, stories, insights and audience summary (cities, countries, age and gender groups) through Meta's official API, and store them so we can show your history over time. We never read personal or private accounts and never post on your behalf.
• Payments. Stripe handles card details. We only see your plan, status and the last four digits.

Why we use it

• To show your dashboard, write your weekly and monthly reports, and send them by email or WhatsApp.
• To compare accounts of a similar size and niche. Comparisons use anonymous totals only; no one sees another user's account through them.
• To run billing and keep the service secure.

Messages

Reports and promotions are separate choices. You can turn either off at any time, and every WhatsApp message and email has a one tap way to stop. We keep a record of when you agreed.

Who we share it with

Only the services that run Riverlamp: Cloudflare (hosting and storage), Meta (Instagram and WhatsApp), Stripe (payments), Anthropic (writing reports from your numbers, not used to train their models) and Resend (email). We do not sell your data.

Keeping and deleting

We keep your data while your account is open. When you disconnect Instagram, close your account, or ask us, we delete your Instagram data within 30 days. See how to delete your data.

Your rights

You can ask to see, correct, export or delete your data by writing to hello@karyulabs.com. We follow the Australian Privacy Act, Indonesia's Personal Data Protection Law and, for people in Europe, the GDPR.