Privacy Policy
Last updated 18 September 2026
This policy explains what Argus collects when you use Argus, why, and what you can do about it. It covers the marketing site and the product.
1. Who is responsible
Argus is the controller for data about visitors and customers. Where you use Argus to monitor accounts, you are the controller for that monitoring and we are your processor; a data processing agreement is available on request at contact@argusroster.online.
2. What we collect
| Data | Why | Basis | Kept |
|---|---|---|---|
| Email address from the waitlist form | To tell you when Argus opens and to set your account up | Consent | Until you unsubscribe or ask us to delete it |
| A salted hash of your IP address | Rate limiting and abuse prevention only | Legitimate interest | 90 days |
| Handles submitted to the free checker, and the result | To answer the request, cache it, and stop the tool being abused | Legitimate interest | 90 days |
| Account details and roster data in the product | To provide the Service | Contract | For the life of the account, then 30 days |
| Screening verdicts, perceptual hashes, blurred thumbnails | To return results and to re-score when a guideline changes | Contract | Up to 24 months |
2.1 Original media is not retained
Content submitted for screening is processed and then discarded. We keep the verdict, a perceptual hash and a blurred thumbnail — not the original file. This is deliberate: it shrinks what could ever be breached, disclosed or have to be deleted.
The exception is material our automated detection flags as apparent child sexual abuse material, which is quarantined and preserved as the law requires and reported to the appropriate authority. That process does not depend on your consent and we will not warn you before it runs.
3. Public information
Public tracking reads information that any visitor to a public Instagram profile can see. We do not attempt to access private accounts, defeat access controls, or obtain anything a logged-out visitor could not. If an account becomes private, we stop and record a gap.
If you are the owner of an account being monitored through Argus and want it removed, write to contact@argusroster.online and we will act on it.
4. Where your data lives
Our database is hosted in the European Union. Some processors operate outside the EU; where they do, transfers rely on Standard Contractual Clauses or an adequacy decision.
| Processor | Purpose |
|---|---|
| Supabase | Database and authentication (EU region) |
| Vercel | Website and application hosting |
| Resend | Transactional and waitlist email |
| Apify | Retrieval of publicly visible profile information |
We will keep this list current. A change of processor that materially affects your data will be announced before it takes effect.
5. What we do not do
- We do not sell personal data, and we never will.
- We do not run advertising or third-party tracking on this site.
- We do not use your screened content to train models for anyone else.
- We do not store raw IP addresses.
6. Your rights
If the GDPR or UK GDPR applies to you, you may request access to your data, correction, erasure, restriction, portability, or object to processing based on legitimate interest. Write to contact@argusroster.online. We answer within 30 days. You also have the right to complain to your national supervisory authority.
7. Security
Data is encrypted in transit and at rest. Access to production data is limited to people who need it. We will notify you and the relevant authority of a personal data breach within the time the law requires.
8. Changes
We will post changes here and update the date at the top. Material changes are announced by email to account holders.