Privacy Policy
Last updated: July 13, 2026
This Privacy Policy explains how Digital Astoria LLC (“Chanis”, “we”, “us”) collects, uses, shares and protects personal information when you use the Chanis website, the seller dashboard, and the online storefronts we host on behalf of our sellers (together, the “Service”). By using the Service you agree to this Policy.
1. Our role
Chanis is a software platform that lets a business owner (“Seller”) connect their own Instagram account, import their posts as products, and run a hosted online store. For a Seller’s account data we act as a data controller. For the shoppers (“Buyers”) who place orders on a Seller’s storefront, we generally process that information as a processor on behalf of the Seller, who is the controller of their own customer data.
2. Information we collect
From Sellers
- Account details — name, email address, and authentication credentials.
- Store configuration — store name, subdomain, theme, products, categories and settings you create.
- Payment onboarding — when you connect Stripe, Stripe collects your business and banking details directly; we store only your connected-account identifier and capability status, never your full bank or card numbers.
From Instagram (only if you connect it)
- Profile — your Instagram user ID, username, account type, profile picture and media count.
- Your media — the images, captions, permalinks and timestamps of posts on the account you connect, which we import to create draft products and branding for your store.
- Access token — a token that lets us read the above on your behalf, stored encrypted.
From Buyers (on a Seller’s storefront)
- Order information — name, contact details, delivery address, items ordered and any answers to a Seller’s checkout questions.
- Payment — card payments are processed by Stripe; Chanis does not receive or store full card numbers.
Automatically
- Technical data — IP address, browser/device information and log data.
- Cookies — strictly-necessary session cookies (see §8).
3. How we use information
- To provide and operate the Service — including importing your Instagram posts, generating product drafts and branding, and hosting your storefront.
- To process and fulfil orders placed on Seller storefronts.
- To communicate with you (e.g. order notifications, service messages).
- To secure the Service, prevent abuse, and comply with legal obligations.
- To maintain and improve the Service.
4. Instagram / Meta data
When you connect Instagram, we request the instagram_business_basic permission, which lets us read your own profile and media. We use this solely to import your posts as products and to brand your store. We do not post on your behalf, access other users’ data, or use your data for advertising. Our use of information received from the Meta/Instagram APIs follows the Meta Platform Terms and applicable Developer Policies.
You stay in control: you can disconnect Instagram in your dashboard at any time, or remove Chanis from your Instagram “Apps and websites” settings. Both revoke our access. See Data Deletion for how to remove imported data.
5. AI processing
To turn posts into useful products, the captions and images you import may be processed by third-party AI providers (such as Google) to suggest product titles, descriptions and categories and to detect non-product (“branding”) posts. This processing is performed to operate the Service; we do not authorise these providers to use your content to train their general models beyond what is necessary to return a result, and we send only the content needed for the feature.
6. How we share information
We do not sell personal information. We share it only with service providers that help us run the Service, under appropriate contractual safeguards:
- Supabase — database, file storage and authentication.
- Stripe — payment processing and Seller payouts (Stripe Connect).
- Meta / Instagram — the source of imported content, via its APIs.
- AI providers (e.g. Google) — to analyse imported content as described in §5.
- Email provider — to send transactional messages (e.g. order notifications).
- Hosting/infrastructure — to serve the website and storefronts.
We may also disclose information where required by law, to enforce our terms, or in connection with a merger or acquisition.
7. Data retention
We keep personal information for as long as your account is active or as needed to provide the Service, then delete or anonymise it, except where we must retain certain records (e.g. financial and tax records) to comply with the law. See Data Deletion for deletion requests and timelines.
8. Cookies
We use strictly-necessary cookies to keep you signed in to the seller dashboard and to operate the storefront (for example, your shopping cart is stored locally in your browser). We do not use third-party advertising or cross-site tracking cookies.
9. Security
We use industry-standard measures — including encryption in transit, encrypted storage of access tokens, and access controls — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. International transfers
Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal information, and to object to certain processing. You can exercise these rights in your dashboard, by disconnecting Instagram, by following Data Deletion, or by contacting us at info@digitalastoria.com.
12. Children
The Service is not directed to children, and we do not knowingly collect personal information from children under the age required by your local law.
13. Changes to this Policy
We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice.
14. Contact us
Digital Astoria LLC
30 N Gould St, Ste N, Sheridan, WY 82801, United States
info@digitalastoria.com
This document is a template tailored to Chanis’s data practices and is provided for convenience. It is not legal advice; please have it reviewed by qualified counsel and complete the bracketed details before publishing.