Privacy Policy

1. Who we are

This Privacy Policy explains how Media Industry LLC (“BoostLand”, “we”, “us”), a limited liability company registered in Georgia (company No. 402373123), collects, uses, and protects information when you use the BoostLand Telegram Mini App and the website at boostland.app. We are the data controller. You can contact us at support@boostland.app. Registered address: Lochini Street No. 3, 2nd Floor, Apartment No. 5, Chughureti District, Tbilisi, Georgia.

2. Overview

BoostLand is a Telegram Mini App for running giveaways and contests in Telegram channels. Channel owners may optionally connect their own Instagram Business account to view aggregated engagement analytics for that account. Participants may also link their own Instagram account by sending a one-time verification code as a direct message to BoostLand’s own Instagram account. We collect only what we need to provide these features.

3. Information we collect

Telegram account data

Provided by Telegram when you open the Mini App: your Telegram user ID, username, first/last name, language, and profile photo.

Instagram Business account data (only if you connect an account)

Collected via the Instagram API with Instagram Login, for the account you choose to connect:

• Account profile (instagram_business_basic): account ID, username, profile picture, and media metadata.
• Insights (instagram_business_manage_insights): aggregated metrics such as reach, views, profile activity, follower counts and trends, and engagement counts.
• Comments and mentions (instagram_business_manage_comments): individual comments and replies on your own media, @mentions of your connected account, and live-broadcast comments — including, for each item, the comment text and the commenting Instagram user’s ID and username. We process this to produce engagement analytics for you, the connected-account owner, and never to enter, rank-for-reward, or otherwise incentivize giveaway participation.

Instagram messages to our own account (account verification)

BoostLand operates its own Instagram Business account. Anyone — including people who do not yet have a BoostLand account — may send a direct message to that account to verify that they control a given Instagram account. When you do, we receive, via instagram_business_manage_messages: the content of your message (such as your one-time verification code), your Instagram user ID and username, your profile picture, and whether you follow our account. We use this to confirm you control the Instagram account, link your Instagram identity to your BoostLand account, reply to you with the result, and produce aggregated analytics. Instagram activity, including whether you follow our account, is never a condition of any giveaway and is never rewarded.

Usage and device data

IP address, device and browser type, and log data, collected automatically when you use the website or app.

4. How we use Instagram data

For each Instagram permission, the data we receive, why we use it, and how long we keep it:

5. Purpose and limits

We use Instagram data to present analytics to the owner of a connected account, and to verify Instagram account ownership when a user chooses to link their account. We do not use Instagram data for contest entry or rewards, we do not sell it, and we do not share it for advertising. Instagram activity is never a condition of any giveaway. For engagement analytics we keep only aggregated counts tied to an irreversible pseudonymous identifier — we do not store the underlying Instagram usernames or IDs in analytics, so these statistics cannot be traced back to you once you unlink.

6. Legal bases (GDPR)

We rely on a specific legal basis for each purpose:

• Operating the Mini App (your Telegram account data): performance of our contract with you — Art. 6(1)(b).
• Connecting your own Instagram Business account and showing you analytics about it: your consent — Art. 6(1)(a) — which you may withdraw at any time by disconnecting the account.
• Verifying that you control an Instagram account (when you send a one-time code by direct message to our Instagram account): performance of the verification you asked us to carry out — Art. 6(1)(b) — and/or your consent shown by sending the code — Art. 6(1)(a). You do not need to be an existing BoostLand user for us to process your verification message.
• Producing aggregated analytics, preventing fraud and abuse, and securing the service (including server access logs): our legitimate interests — Art. 6(1)(f).

7. Sharing

We share data only with service providers that host and operate BoostLand (for example, cloud hosting and error monitoring), under appropriate agreements, and where required by law. We do not sell personal data.

8. Retention

We keep personal data only as long as needed for the purpose it was collected for:

• Profile and identity data (your name, Instagram user ID and username, and the link between your Telegram and Instagram identities): deleted immediately and irreversibly when you unlink Instagram or delete your BoostLand account. You can re-link at any time. Requests sent by email are completed without undue delay after we verify them.
• Engagement analytics: stored only as aggregated counts tied to an irreversible pseudonymous identifier, with no Instagram username or ID attached; because these statistics no longer identify you, they may be retained.
• Instagram verification messages (your one-time code): deleted promptly after verification completes.
• Server access logs (IP address, device/browser type): kept only for a short period for security and troubleshooting (for example, up to 90 days), then deleted or aggregated.

We may retain a limited amount of data where the law requires it (for example, accounting or fraud-prevention records), only for as long as required.

9. Your rights

Depending on your location (including under the GDPR and CCPA), you may have rights to access, correct, delete, or export your data, and to object to or restrict certain processing. Where we rely on your consent, you may withdraw it at any time (without affecting processing already carried out). If the GDPR applies to you, you also have the right to lodge a complaint with your local data-protection supervisory authority. Contact support@boostland.app to exercise these rights; we respond without undue delay and within one month, extendable by up to two further months for complex requests, in which case we will tell you.

10. Data deletion

You can delete your data at any time — see our User Data Deletion page.

11. Security

We use technical and organizational measures to protect your data. No method of transmission or storage is completely secure.

12. International transfers

We are established in Georgia, and we and our service providers (including cloud hosting/CDN and Meta’s Instagram API) may process your data in other countries, including outside the EEA and the United Kingdom. Where we transfer personal data from the EEA or the UK to a country without an adequacy decision, we rely on appropriate safeguards under Chapter V of the GDPR — primarily the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum) — and apply additional measures where needed. You can request a copy of the relevant safeguards at support@boostland.app.

13. Age

BoostLand is intended only for users who are at least 18 (or the age of majority in their jurisdiction), consistent with our Terms of Service. The service is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data (including by sending a direct message to our Instagram account), contact support@boostland.app and we will delete it.

14. Cookies and tracking technologies

The BoostLand website does not set advertising or analytics cookies, tracking pixels, or tag managers, and does not track you across other sites or services. Our hosting and content-delivery providers process standard server access logs (such as your IP address and browser type) to deliver and secure the website. If we introduce cookies or similar technologies in future, we will update this Policy and, where required, ask for your consent.

15. California privacy rights (CCPA/CPRA)

This Policy serves as our notice at collection for California residents.

• Categories we collect (Cal. Civ. Code §1798.140(v)): identifiers (Telegram user ID, username, name, Instagram account ID/username, IP address); internet and network activity (device/browser type, log data); visual information (profile pictures); and, only if you message our Instagram account to verify an account, the content of those communications. Sources: directly from you, from Telegram, and from the Instagram API.
• Purposes: to provide and secure the service, show owners analytics about their own connected account, and verify Instagram account ownership.
• No sale or sharing: we do not sell your personal information and we do not share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months.
• Your rights: to know/access, delete, correct, opt out of sale/sharing (we do neither), and limit the use of sensitive personal information. We will not discriminate against you for exercising these rights, and you may use an authorized agent.

To exercise these rights, email support@boostland.app; we will verify your identity before acting. BoostLand does not make decisions producing legal or similarly significant effects about you based solely on automated processing.

16. Changes

We may update this policy; we will post the new effective date here.

17. Contact

Media Industry LLC (company No. 402373123), Lochini Street No. 3, 2nd Floor, Apartment No. 5, Chughureti District, Tbilisi, Georgia. support@boostland.app.