Privacy Policy

Last updated: March 2025  ·  Applies to understoryfm.com

1. Who we are

Understory ("we", "us", "our") operates the website understoryfm.com — a platform connecting brands with nano-influencers. We are based in the European Union.

For privacy-related questions, contact us at: privacy@understoryfm.com

2. What data we collect

When you join our waitlist, we collect:

• Your email address — to notify you when we launch and send relevant product updates
• Your Instagram account name — to understand who is interested in using the platform

We also collect basic, anonymised usage data to understand aggregate traffic patterns on the site. This data does not use cookies and cannot be used to identify individuals.

We do not collect:

• Sensitive personal data (health, financial, biometric)
• Data from third-party tracking or advertising cookies

3. Why we collect it (legal basis)

Under the GDPR, our legal basis is:

• Consent — you voluntarily submitted your email and Instagram handle via our waitlist form
• Legitimate interests — understanding aggregate site usage to improve our product

4. How we use your data

• To contact you when Understory launches
• To send occasional product updates (you can unsubscribe at any time)

We will never sell, rent, or share your personal data with third parties for their own marketing purposes.

5. How long we keep your data

We retain your data until you request deletion, or until 24 months after our last contact — whichever comes first.

6. Where your data is stored

All personal data is stored on servers located within the European Union. We do not transfer your data outside the EU/EEA.

7. Your rights under GDPR

As an EU/EEA resident you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Restriction — ask us to limit how we process your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — unsubscribe or request removal at any time

To exercise any of these rights, email us at privacy@understoryfm.com. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection supervisory authority. As an EU consumer, you may use the EU Online Dispute Resolution platform.

8. Meta Platform Data

Understory integrates with Meta's Messenger API and Instagram Graph API to enable brand users to manage influencer outreach and communications within the platform.

When a brand user connects their account, we may receive and process the following data via Meta's APIs:

• Instagram account identifiers, usernames, and basic account metadata
• Follower and audience data necessary to operate the matching service
• Message thread content sent and received through our platform

How we use this data: solely to operate the Understory platform — matching brands with relevant influencers and facilitating communication between them. We do not use Meta platform data for advertising, profiling, or any purpose beyond delivering the core service.

We do not sell, transfer, or share Meta platform data with any third party, except as strictly necessary to operate the service or as required by law.

Retention: Meta platform data is retained only for as long as necessary to provide the service. You may request deletion at any time.

Deletion requests: email privacy@understoryfm.com and we will action the request within 30 days.

Understory complies with Meta's Platform Terms and Developer Policies.

9. Cookies

This site uses no tracking or advertising cookies. We store a single functional value in your browser to remember your cookie preference. Our analytics are server-side and cookieless.

10. Children's privacy

Understory is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe we have inadvertently done so, contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy as the product evolves. Significant changes will be communicated by email. The "last updated" date at the top of this page reflects the most recent revision.