Privacy policy
1. Who we are
Vinco Sport Ltd, company no. 08776048, registered in England and Wales. Registered office: Suite 5, Camellia House, 76 Water Lane, Wilmslow, SK9 5BB, United Kingdom. is the data controller for personal data processed in connection with Vinco Engage. Contact: [email protected]. [DPO CONTACT ROUTE]
2. Data we collect
Account and contact details you provide; usage and device data collected automatically; and the service-specific data described in section 3. We collect no more than the service needs to run.
3. Service-specific processing
- Vinco Engage is operated by Vinco Sport Ltd (company no. 08776048), registered in England and Wales. Privacy queries: [email protected].
- For people who interact with a connected account we process their Instagram username and id, the comment or message that triggered the automation, their replies and button taps, and the state needed to run the conversation (tags, opt-in status, messaging-window timestamps).
- This data reaches us from Meta's Instagram Platform because the person chose to interact with a connected account. We request only the Instagram permissions the tool needs: basic account access, comment management and message management.
- Data is stored encrypted at rest on AWS in the EU (eu-west-1). We do not collect payment details, government identifiers or special category data through Vinco Engage.
- Disconnecting an account deletes its stored automations, conversation history and access token. Conversation data is otherwise retained for [PERIOD].
- UK GDPR rights (access, correction, deletion, objection) can be exercised via [email protected]; you can also complain to the ICO.
4. How we use data
To provide and improve the service, meet contractual and legal obligations, secure our systems, and, with consent, send relevant updates. Legal bases: contract, legitimate interests, consent. [ADJUST PER PRODUCT]
5. Sharing & transfers
Shared with processors under contract (hosting, analytics, support tooling) and never sold. International transfers are protected by adequacy decisions or standard contractual clauses. [LIST PROCESSORS]
6. Retention
Kept only as long as needed for the purposes above, then deleted or anonymised. Default retention: [PERIOD]. [ADJUST PER PRODUCT]
7. Your rights
Access, rectification, erasure, restriction, portability and objection, exercised [email protected]. [CONTACT ROUTE] You may also complain to your supervisory authority (UK: the ICO).