Privacy Policy for Recon

Last updated: July 14, 2026

This Privacy Policy explains how the Recon browser extension (“Recon”, “we”, “us”) handles information when you use it. Please read it carefully. By installing and using Recon, you agree to the practices described here.

1. Who we are

Recon is a browser extension that helps short-form content creators research what is performing well on Instagram and TikTok. It organizes content you view as you browse — such as video hooks, audio details, and engagement metrics — into a dashboard on your own device.

Recon is operated by Kostas Kaskelis, a sole trader based in Ireland.

Contact: team@reconfyp.com

2. Summary (plain English)

• The content data Recon collects as you browse (videos, hooks, transcripts, metrics) is stored locally on your own device, not on our servers.
• We do collect the limited information needed to run an account: your email address (for sign-in) and, if you subscribe, payment information handled by our payment processor.
• To provide transcription and filtering features, short pieces of data (audio clips and hook text) are sent to our secure backend and third-party AI providers for processing, then returned. We do not build a long-term server-side store of your collected content.
• We do not sell your personal information.

3. Information we collect

a) Account information. When you create an account, we collect your email address. If you sign in with Google (OAuth), we receive basic profile information (such as your email and account identifier) from Google as part of sign-in. This is used to authenticate you and manage your account.

b) Content you collect while browsing (stored locally). As you browse Instagram and TikTok, Recon records information about the content you view — for example video hooks, captions, audio identifiers, transcripts, view/like/comment counts, creator handles, and follower counts. This collected content is stored locally in your browser’s storage on your device. We do not maintain a copy of this collected content on our servers.

c) Data processed to provide features. To provide certain features, limited data is transmitted to our backend (hosted on Supabase) and to third-party AI providers, processed, and the result returned to your device:

• Audio transcription: short audio clips from videos you view are sent to our backend and to our transcription provider (Groq) to generate text transcripts.
• Hook filtering: hook text is sent to our backend and to our AI provider (Google Gemini) to classify which hooks are relevant.

These transmissions are used only to perform the requested processing. We do not use them to build a persistent server-side profile of your collected content.

d) Usage and account limits. We store limited account-related data on our backend, such as your account identifier, subscription status, and usage counters needed to enforce fair-use limits.

e) Payment information. If you purchase a subscription, payment is processed by Lemon Squeezy, which acts as the merchant of record and handles billing and applicable sales tax/VAT. We do not receive or store your full card details; Lemon Squeezy handles payment information under its own privacy policy.

4. How we use information

We use the information above to:

• authenticate you and provide access to the extension;
• provide the extension’s features (organizing collected content, transcription, filtering);
• operate and secure our backend, and enforce usage limits;
• process subscriptions and payments;
• communicate with you about your account (including email verification and support).

We do not sell your personal information, and we do not use your data for advertising.

5. Third-party services

Recon relies on the following third-party services, each governed by its own privacy policy:

• Supabase — authentication and backend functions.
• Groq — audio transcription processing.
• Google (Gemini) — hook classification; and Google OAuth for sign-in.
• Resend — delivery of account emails (such as confirmation and password reset).
• Lemon Squeezy — payment processing and merchant of record for subscriptions.

Data sent to these providers is limited to what is needed to perform the relevant function.

International transfers. Some of these providers process data on servers outside the European Economic Area (for example, in the United States). Where that happens, the transfer is limited to what is necessary to provide the features described in this policy.

6. Chrome Web Store Limited Use disclosure

Recon’s use of information received from Google APIs, and from the platforms on which it runs, adheres to a limited-use principle: data is used only to provide and improve the user-facing features described in this policy, is not sold, is not used for advertising, and is not transferred to third parties except as required to deliver those features or as required by law.

7. Data storage and retention

• Collected content (videos, hooks, transcripts, metrics) is stored locally on your device and remains there until you delete it (for example, via the extension’s “Clear Data” function) or uninstall the extension. You can clear it at any time.
• Account data (email, subscription status, usage counters) is retained on our backend for as long as your account is active. You may request deletion of your account data (see Section 9).
• Data sent for processing (audio, hook text) is used transiently to return a result and is not retained by us as a persistent store of your content.

8. Data security

We take reasonable measures to protect information, including keeping API credentials on our secure backend rather than in the extension, enforcing row-level security on our database, and requiring authentication for backend access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights and choices

• Access/deletion of local data: because collected content is stored on your device, you control it directly — clear it via the extension or by uninstalling.
• Account data: you may request access to, correction of, or deletion of your account data by emailing team@reconfyp.com.
• If you are in the EEA or UK, you have rights under the GDPR, including access, rectification, erasure, restriction, portability, and objection to certain processing. You also have the right to lodge a complaint with your local supervisory authority — in Ireland, the Data Protection Commission (dataprotection.ie).
• If you are in California, you may have additional rights over your personal information, including access and deletion.

Contact us at the address above to exercise any of these rights.

10. Children

Recon is not directed to children under 16, and we do not knowingly collect personal information from them.

11. Relationship to Instagram and TikTok

Recon is an independent tool and is not affiliated with, endorsed by, or sponsored by Instagram, Meta, or TikTok. Recon organizes content you choose to view while browsing those platforms. Your use of Instagram and TikTok remains governed by their respective terms and policies.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above. Continued use of Recon after changes take effect constitutes acceptance of the updated policy.

13. Contact

Questions about this Privacy Policy: team@reconfyp.com