Privacy notice

Last updated 30 September 2026

Elgrace is a creator and brand collaboration agency, a Velora Enterprise brand. We keep a database of social media creators so we can offer them paid brand work. This page explains, in plain English, what is in it and how to get out of it.

What we collect

• Public Instagram profile data of business and creator accounts, read through Meta's official Instagram Graph API: username, name, bio, website, profile picture, follower, following and post counts, and recent public posts with their captions and like, comment and view counts.
• Public contact details only if you published them in your own bio or profile (for example a business email or phone number). We record where each detail came from and when we saw it.
• Public YouTube channel data from the official YouTube Data API: channel name, subscriber, view and video counts, and country.
• What you give us if you sign up with us, opt in, or connect your account.

From this we work out numbers such as engagement rate and average views, and make best guesses about your city, language and content categories, and which posts look like brand collaborations.

What we do not do

• We do not scrape web pages, use fake or logged-out accounts, or use private or unofficial endpoints.
• We do not read private accounts, private messages, stories or anything else that is not public.
• We do not sell this data.

Why we use it

To find creators who fit a brand's campaign, contact them about paid work, and measure how campaigns perform. When we suggest you to a brand we may share your public profile numbers with that brand.

Who can see it

The Elgrace team and our own internal tools, including assistants that help our team search and draft messages. The data stays on servers we control.

How long we keep it

• Instagram data: while your account stays public and professional. We refresh it every 7 to 90 days and keep a short history of summary numbers (followers, engagement) to see growth. Contact details you take out of your bio are deleted at the next refresh.
• If your account becomes private or personal, or is gone: when a refresh finds this, we delete the profile, posts, numbers, brand links and contact details we read from Instagram. We keep only the handle, to check again later, and stop checking after about a year.
• YouTube public data: deleted after 30 days, unless you connect your channel to us.
• If you ask to be removed: deleted within 7 days. An email or phone number you leave on the removal form is used only to confirm the removal and is deleted once the removal is done. Your confirmation code keeps working for 30 days after that.

How to be removed

Use the removal form or email privacy@elgrace.in with your handle. We stop collecting straight away and delete everything we hold about that handle within 7 days. We keep only a one-way fingerprint (a hash) of the handle, so we never add you back.

Connected accounts

If you connect an account through Facebook Login, we store the access token on our server and use it only to read data through Meta's official APIs. You can remove our access at any time in your Facebook settings under Business Integrations, and ask us to delete what we hold.

Your choices

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Write to privacy@elgrace.in. Depending on where you live, data protection law may give you more rights, and we will help you use them.

Changes

If we change this notice we update the date at the top.