This policy describes the Social Circuit website, Chrome extension and licensing service, operated by NORRHOME LLC. Public sales have not opened; test access and explicitly issued complimentary licenses may be available.
Purpose and scope
Social Circuit reads the signed-in Instagram account and its current followers/following visibility setting. When you explicitly confirm, it requests a change to that setting. Purchase verification and recovery are used only to provide paid access for the account associated with a purchase.
Instagram information handled locally
After you request access, the extension reads the username, numeric account ID and current privacy-setting value for the selected Instagram tab. To identify the account safely, it processes account-form and bounded homepage responses locally; unrelated response contents are discarded. It reads the CSRF security token needed for Instagram requests. The browser attaches Instagram session cookies automatically. The extension does not read the sessionid cookie, passwords, password fields, browser cookie databases, direct messages or the contents of followers/following lists.
The extension examines the selected Instagram tab’s URL and temporary tab/window identifiers to target your request and return from checkout. It does not collect a general browsing history. Account and setting snapshots are short-lived. No raw Instagram username, numeric ID, session cookie or CSRF token is sent to the licensing server or Stripe by the extension. Instagram necessarily receives requests to its own service and handles them under its own policies.
Purchase references and recovery codes
For each Instagram account, the extension creates a random purchase proof. It stores the proof and Stripe Checkout reference in extension-local storage under a key derived from the numeric account ID. It derives an account binding from the proof and ID and sends that binding, proof and session reference to the licensing service when needed. The service stores the binding and a hash of the proof in Stripe session metadata and checks current payment, refund and dispute status before granting paid access.
These references are pseudonymous purchase data, not guaranteed anonymous data. A recovery code contains an encoded purchase proof and Checkout reference; encoding is not encryption. Anyone with the code may try to restore the corresponding purchase, but verification also requires the matching signed-in Instagram account. Keep the code private. Codes are not automatically emailed, copied to analytics or included in support diagnostics.
Test builds use SC1T codes and separate local records; the commercial release uses SC1L codes. A test purchase does not grant commercial access. Our licensing service also verifies explicitly issued complimentary licenses. Public paid checkout is not enabled yet. When paid sales open, Stripe-hosted checkout and payment verification operate as described here.
Complimentary access
The operator may issue a complimentary license to a specific Instagram account. After a fresh account check, Show account reference displays a derived reference locally. You may choose to share it with support. It is a stable pseudonymous identifier, not anonymous data or a sign-in credential, and does not itself unlock access. The raw Instagram numeric ID is not included. Complimentary records on the licensing server contain a grant reference, a hash of a random proof, the derived account reference, expiry and revocation status. Verifying a complimentary license does not contact Stripe or create a payment. The same recovery controls and explicit setting confirmations apply. Complimentary licenses can expire or be revoked. Keep their recovery codes private like paid-license codes.
Payments and providers
Stripe hosts checkout and processes information you provide there, such as payment details, billing information and email. Social Circuit does not receive full card details in the extension. Stripe maintains payment records. Vercel hosts the licensing service and website and may process ordinary request and security logs, including IP addresses and request metadata. These providers’ own policies and applicable requirements also apply. Support email is handled through the operator’s email provider.
The extension’s return-to-Instagram flow stores temporary tab identifiers and a Checkout reference in Chrome session storage, with expiry. It contains no recovery proof. This state clears on browser restart; local purchase records do not. Application diagnostics do not include request bodies, purchase proofs, recovery codes or Instagram tokens.
Uses and sharing
Data is used to provide the requested setting control, verify and recover the account’s license, process payments, prevent misuse and provide requested support. It is not sold or used for advertising, unrelated profiling or training generalized AI models. It is not transferred to data brokers. Provider processing is limited to delivering the service and relevant operational or legal requirements. Human access to support information is limited to handling your request or a necessary security or legal matter.
Social Circuit uses and transfers user data only as permitted by the Chrome Web Store User Data Policy, including its Limited Use requirements. No advertising or analytics scripts are included in the extension or its local tutorial.
Storage and deletion
Local purchase references remain until you clear extension storage or uninstall. Removing Instagram permissions does not delete those purchase references or undo an Instagram setting. The setting is controlled by Instagram and may remain after uninstalling. Save your code before uninstalling if you want to restore the purchase on the same account later.
Stripe records and hosting/security logs follow their providers’ retention settings and applicable requirements; they are not necessarily deleted when you uninstall. Contact norrhomesupp@gmail.com to request access, correction or deletion of information held by the operator. Some transaction records may need to be retained to meet accounting, fraud-prevention or legal requirements. Identity or purchase ownership may need to be verified, but support will not ask for your Instagram password, cookies or recovery code.
Support
Diagnostics supplied by the extension contain a version, operation stage, safe error label and numeric HTTP status. They omit usernames, account IDs, session cookies, tokens, purchase proofs and recovery codes. If you send screenshots, remove sensitive fields first. No automatic recovery is promised if you lose the code.
Updates
We will update this policy and the extension’s disclosures when our data handling changes. The date above identifies this version. Contact support with privacy questions or requests.