Privacy

This page explains how ToneMosaic handles information when you use the Instagram Bio Generator, sign in, or manage ToneMosaic Pro.

Last updated: October 10, 2026

Information we process

When you submit a public Instagram handle or supported public profile URL, ToneMosaic processes public profile information needed to create the generation you requested. Depending on what is publicly available, this can include the display name, profile bio, recent captions, and selected recent public images. ToneMosaic does not ask for Instagram credentials or use your login to access private accounts.

If a profile is private or has too little usable public content, you can provide a category and three keywords. ToneMosaic uses those details to generate the bios you requested.

• The handle or profile URL you submit.
• Public profile content needed to generate your requested bios.
• The category and three keywords you choose to provide.
• Pseudonymous device, monthly network-quota, and error diagnostics used to protect and operate the service. Our infrastructure briefly receives a source IP address to calculate an HMAC-hashed monthly quota value; the raw address is not written to ToneMosaic application tables. A necessary tm_device cookie stores a random pseudonymous identifier for the same purpose.
• Your login email and authentication records when you use a Magic Link.
• Waffo subscription records such as customer and subscription IDs, status, billing period, and payment-event references. ToneMosaic does not receive your full payment-card number.
• Successful Pro generation results saved to provide your bio history.

How we use information

We use this information to generate and refine bios, apply Free and Pro allowances, authenticate accounts, provide billing access, save Pro history, diagnose errors, prevent abuse, improve reliability, and respond to requests. We do not sell your personal information or use submitted Instagram content for advertising.

Service providers

We use ScrapeCreators for public profile retrieval, OpenRouter for language-model processing, Supabase Auth and Supabase data services for sign-in and application records, Waffo Pancake for checkout, subscriptions, billing management, and payment events, and Vercel for hosting and delivery. These providers process information as needed to provide their services and under their own terms and privacy practices.

Retention and security

ToneMosaic does not use raw captions or image URLs as long-term active profile records. A derived profile cache is marked to expire after one hour and is no longer returned for active use after expiry. For current Pro accounts, we retain saved Pro bio history for 30 days, after which it is removed through scheduled maintenance. Expired rows and backups may remain until database maintenance or backup expiration. We retain subscription and payment-event records as reasonably needed for account, security, tax, legal, and dispute purposes. Device and monthly IP values are HMAC-hashed. We use reasonable safeguards, but no online service can promise absolute security.

Your choices and requests

A login is not required for the Free generator but is required to buy or use account-bound Pro features. You may ask to access, correct, or delete information associated with your account by writing to privacy@tonemosaic.com. You can manage subscription settings through the Waffo Consumer Portal. We may need to verify your request and may retain limited records where reasonably necessary for security, legal obligations, or dispute resolution.

Children

ToneMosaic is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can review and remove it where appropriate.

International processing

Our service providers may process information in countries other than yours. We limit the information shared to what is needed to operate the service and use the safeguards described above.

Affiliation, changes, and contact

ToneMosaic is not affiliated with, endorsed by, or sponsored by Meta or Instagram. We may update this disclosure as the product changes and will post the current version and date on this page. Contact privacy@tonemosaic.com with privacy questions or requests.

Review our Terms, refund policy, or return to the generator.