Acceptable Use Terms

Version 2026-10-29 · Machine-readable version (JSON)

Power Scraping collects and enriches declared public profiles and explicitly authorized Instagram targets through your paired extension or a connected reusable session on the hosted worker. You are responsible for lawful basis, account authority and Instagram's terms. Complete history requires ownership, a creator contract or client mandate with a reference. Unattended schedules do not bypass access restrictions or plan limits.

1. Declared, authorized targets only, under an account you may use

We accept records only for a profile you have declared as an authorized target with a true current basis and an auditable reference. Supported bases are own_account, creator_contract, client_mandate, public_interest_research and public_profile. Public availability and research intent do not establish lawful processing or Instagram permission by themselves. Complete_history requires own_account, creator_contract or client_mandate with a reference. Jobs and scheduled runs require a declared active target and current acceptance; records of unrelated accounts are dropped. The extension keeps its own-account viewer guard. Hosted collection uses a reusable session you are authorised to use and connect and can collect supported public or explicitly authorized targets under your instructions. Revoke targets and sessions when authority lapses. A profile whose owner has objected is suppressed: nobody can declare it again. You collect at your own risk and must comply with Instagram's terms. Scheduled or resumable work does not authorize circumvention.

2. No evasion of technical or contractual controls

The collector fails closed on a warning, a block, a rate limit, a challenge or a sign-out. It does not spoof device fingerprints, solve CAPTCHAs, rotate residential proxies, share or resell session credentials, or otherwise work around an access control. You may not ask us to; you may not modify or script the extension to do so, or spread one target's collection across several browsers or Instagram accounts to get around a limit; and you may not use any output to build such a capability. Requesting evasion is grounds for immediate suspension.

3. Data-subject handling

Collected material routinely contains personal data, and you are a controller of it (the data processing addendum sets out our role). You must have a lawful basis, provide the notice your jurisdiction requires, and honour access, correction, objection and erasure requests. We act on your documented instructions, delete a target's data on request, and never sell, pool or re-sell tenant data. Do not use the service for special-category profiling, surveillance of private individuals, or any decision about a person that produces a legal or similarly significant effect.

4. Retention and deletion

Collected records, evidence, media archives and generated reports follow your plan retention window and are deleted when it expires. Evidence is kept for as long as its field. Active encrypted login connections persist until revoked or the account closes; revoke clears their stored ciphertext. Ordinary audit events name the actor, target and basis but contain no credentials or source content, and are retained for 24 months before automated deletion. Unresolved account or membership deletion requests remain recorded for operator processing until completion is recorded for the exact request in the same account, even beyond 24 months. Completion proof is retained beyond 24 months only while its matching request is still within the ordinary audit retention window, so completed work does not reappear as pending. Once a completed request is outside that window, it and any expired completion proof are deleted by the purge. Recording a request does not delete the account or its data; erasure remains operator-assisted. You may request earlier deletion of any target; an expired result cannot be advertised as available.