Privacy policy

Instagram integration: what we collect and how we handle it

Web For Actors offers an optional feature that displays your most recent Instagram photos on your own website. This section explains exactly what happens to your data when you use it. If you never connect an Instagram account, none of this applies to you and we receive nothing from Instagram.

Connecting is entirely your choice. The connection is made through Instagram's own official authorization screen. You sign in to Instagram directly, not to us. We never see, receive or store your Instagram password. Instagram asks you to approve the connection and tells you what you are granting before anything is shared.

What we receive. We request a single permission, instagram_business_basic, which is the minimum needed to show a photo feed. Through it we receive:

1. Your Instagram account ID and username
2. An access token, which is the key that lets us request your media on your behalf
3. For your recent posts: the image address, the caption, the link back to the post on Instagram, the media type and the date it was posted

What we do with it. One thing only: we display your recent photos on the website you have with us, linking each one back to your Instagram post. We do not use this data for advertising, we do not build a profile from it, we do not use it to train any system, and we do not analyze it for any purpose beyond rendering your feed.

We do not keep copies of your photos. Your images are shown directly from Instagram's own servers. We store only the links, captions and post dates, and we refresh them about once an hour so your site stays current without repeatedly calling Instagram.

How long we keep it. Your access token is kept for as long as the integration is switched on, and is renewed automatically while it is in use. Instagram tokens expire after 60 days without renewal, and an expired token is removed. Cached links and captions are replaced each time the feed refreshes.

Disconnecting deletes it. You can disconnect at any time from your Web For Actors admin, under Settings and then Integrations. When you disconnect, we immediately delete the access token, the stored account ID and username, and every cached post. Nothing is retained and nothing is archived. The same deletion happens automatically if you remove our app from Instagram's own Apps and websites settings, and if you close your Web For Actors account.

Requesting deletion directly. You can also ask us to delete your Instagram data without touching your account, at any time, at https://www.webforactors.com/instagram-data-deletion or by writing to info@webforactors.com. We action these within 30 days and confirm when it is done.

We never sell or share it. Instagram data is not sold, rented, traded or passed to advertisers, data brokers, analytics providers or any other third party. It is used to render your own website and nothing else.

Our use of information received from the Instagram API follows Meta's Platform Terms and Developer Policies. Web For Actors is a trading name of Find Your Net, LLC, an independent company that is not affiliated with, endorsed by or sponsored by Meta Platforms, Inc. Instagram is a trademark of Meta Platforms, Inc.

Dropbox integration: what we collect and how we handle it

Web For Actors offers an optional feature that lets you bring your own audio files and images from Dropbox into the media library of the website you have with us. This section explains exactly what happens to your data when you use it. If you never connect a Dropbox account, none of this applies to you and we receive nothing from Dropbox.

Connecting is entirely your choice. The connection is made through Dropbox's own official authorization screen. You sign in to Dropbox directly, not to us. We never see, receive or store your Dropbox password. Dropbox tells you exactly what you are granting before anything is shared, and you can refuse.

We ask for read-only permission, and nothing more. We request three permissions, which are the minimum needed to let you choose a file and bring a copy of it across:

1. account_info.read, so we can show you which Dropbox account is connected
2. files.metadata.read, so you can browse and search your own folders to find a file
3. files.content.read, so we can read the file you picked

We cannot change anything in your Dropbox. We do not request write permission of any kind. That is not a promise about our conduct, it is a limit on what Dropbox will let us do: we are technically incapable of adding, editing, moving, renaming or deleting anything in your account, and of sharing anything from it. We also never ask for permission to see your Dropbox contacts, your file requests, or files shared with you that you have not chosen.

What we receive. When you connect, we receive your Dropbox account ID, your display name and the email address on the account, and a token that lets us make requests on your behalf. When you go looking for a file to import, we receive the names, paths, sizes and dates of the folders and files you are browsing. When you pick one, we receive that file's contents.

What we do with it. One thing only: we place a copy of the file you chose into your own media library on your website, exactly as if you had uploaded it yourself. We do not read files you did not pick. We do not scan, index or catalog your Dropbox. We do not use any of it for advertising, we do not build a profile from it, we do not use it to train any system, and we do not analyze it for any purpose beyond completing the import you asked for.

Where the token lives. The token stays on our servers. It is never sent to your browser and never appears in the pages you see, so it cannot be read by anyone looking at your screen or at the page source. The short-lived key used for each individual request is created at the moment of the request and discarded straight afterward. It is never written down.

How long we keep it. The token is kept for as long as the integration is connected. Folder and file listings are not kept at all: they are shown to you while you are choosing and then discarded. A file you import becomes an ordinary item in your media library and stays there until you delete it, the same as any file you upload directly.

Disconnecting deletes it, and withdraws our access. You can disconnect at any time from your Web For Actors admin, under Settings and then Integrations. When you disconnect we first tell Dropbox to cancel the permission at their end, so it stops appearing in your Dropbox Connected apps, and then we delete the token, the account ID and the account name from our records. Nothing is retained and nothing is archived. The same happens if you remove our app from Dropbox's own settings, and if you close your Web For Actors account. Files you already imported are your own content and stay in your media library, where you can delete them yourself at any time.

We never sell or share it. Dropbox data is not sold, rented, traded or passed to advertisers, data brokers, analytics providers or any other third party. It is used to build your own website and nothing else.

Not switched on yet. Importing files is being rolled out. Until it is available to you, connecting establishes the link and reads nothing beyond the name of the account, even though the permission to read files has already been granted. This paragraph will be removed when the feature goes live.

Our use of information received from the Dropbox API follows the Dropbox Developer Terms and Conditions and Branding Guidelines. Web For Actors is a trading name of Find Your Net, LLC, an independent company that is not affiliated with, endorsed by or sponsored by Dropbox, Inc. Dropbox is a trademark of Dropbox, Inc.

Google Contacts integration: what we collect and how we handle it

Web For Actors offers an optional feature that lets you invite people you know to the service and earn a referral credit if they subscribe. Rather than making you type addresses by hand, you can import your contacts and pick from a list. This section explains exactly what happens to your data when you use it. If you never connect a Google account, none of this applies to you and we receive nothing from Google.

Connecting is entirely your choice. The connection is made through Google's own official authorization screen. You sign in to Google directly, not to us. We never see, receive or store your Google password. Google tells you exactly what you are granting before anything is shared, and you can refuse.

We ask for read-only permission, and nothing more. We request a single Google permission, https://www.googleapis.com/auth/contacts.readonly, which lets us display your contact list so you can choose who to invite. We deliberately do not request access to "Other contacts", the wider pool of people you have emailed but never saved, even though that permission was available to us.

We cannot change anything in your Google account. We do not request write permission of any kind. That is not a promise about our conduct, it is a limit on what Google will let us do: we are technically incapable of adding, editing, moving, renaming or deleting anything in your contacts. We never ask for access to your email, your calendar, your files, or any other part of your Google account.

Who handles the contacts. The import itself is performed by CloudSponge, a specialist contact-picker provider that acts as our service provider for this feature. Your contact list is fetched by CloudSponge and shown to you in your own browser. Their handling of it is governed by the CloudSponge privacy policy.

Only the people you pick ever reach us. Browsing your contact list happens in your browser. The full list is never sent to our servers and we never receive it. When you select specific people and choose to send them an invitation, only those selected entries, their first name, last name and email address, are transmitted to Web For Actors.

What we do with it. One thing only: we email the invitation you asked us to send, containing your own referral link and any personal note you wrote. We do not add anyone to a mailing list, we do not send follow-ups, and we do not contact them again for any other reason. We do not use this data for advertising, we do not build profiles from it, and we do not use it to develop, improve or train generalized artificial intelligence or machine learning models.

How long we keep it. We retain a record of the addresses you chose to invite, so that referrals can be attributed to you correctly and so that the same person is not invited twice by mistake. Contacts you did not select are never stored, because they never reach us in the first place.

Deletion on request. You can ask us to delete the record of everyone you have invited at any time by emailing info@webforactors.com. You can also withdraw our access to your contacts entirely from your Google account's Third-party apps & services settings, which stops any further import immediately.

We never sell or share it. Google contact data is not sold, rented, traded or passed to advertisers, data brokers, analytics providers or any other third party beyond the service provider named above who performs the import on our behalf.

Web For Actors' use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Web For Actors is a trading name of Find Your Net, LLC, an independent company that is not affiliated with, endorsed by or sponsored by Google LLC. Google and Gmail are trademarks of Google LLC.