Privacy Policy

1. Consent and plain Language Notice

Under Section 5 of the Digital Personal Data Protection (DPDP) Act, 2023, this notice is presented to you in plain, easy-to-understand language. By using InstaGrab by Team Gyata, you consent to the processing of limited technical parameters required strictly to deliver the service and protect it from abuse.

2. What Data We Process (And What We Don't)

Our operations are designed with strict data minimization principles:

• No Account Credentials: We do not collect names, email addresses, phone numbers, or passwords. You can use this service completely anonymously.
• No Media Storage: When you request a download, our server fetches the raw media stream from Instagram CDN and proxies it directly to your browser on-the-fly. We do not cache or store the downloaded files on our servers.
• Technical Telemetry (Temporary): We temporarily process technical information including your IP address, User-Agent, request timestamps, and the sanitized Instagram URL.
• Short-Lived Tokens: Unique UUID download tokens are generated in-memory with a 5-minute time-to-live (TTL) and are automatically deleted upon expiration or maximum use.

3. Purpose of Processing

The technical information we log is processed under the following lawful bases:

• Security & Abuse Prevention: To detect and block malicious requests, scraping, DDoS attacks, or API hammering.
• Rate Limiting: To enforce fair usage constraints per IP address so the service remains fast for all users.
• Security Audits (SSRF Prevention): Pinned DNS lookups to block requests pointing to local, private, or unauthorized networks.

4. Your Rights under the DPDP Act

Since we do not collect personal identifiers (such as email, name, or account records), we cannot map technical IP logs to specific individuals. However, we strictly support your rights:

• Right to Erasure: IP rate-limiting history and transient logs are automatically pruned.
• Right of Grievance Redressal: If you believe your data has been handled incorrectly, you have the right to contact our Grievance Officer.