How Clue Labs uses your data

When you connect your Instagram account, Clue Labs pulls the following data via Meta's official API:

Clue Labs also collects what you enter into the platform: your Brand Settings, campaign objectives, notes, and any other information you provide directly.

To generate your recommendations Every suggestion Sam generates — campaign post briefs, Next Suggestions, Newsjacking briefs, Wild Card ideas — is built from your account data. Your post history, your performance signals, your audience behaviour, your brand profile. The data is the foundation of the intelligence.

To calculate your Clue Score Your weekly Clue Score is calculated from your content consistency, engagement trend, and audience response signals pulled from your connected account.

To power your Growth Tracking Your Growth Tracker is built from your historical post performance data, normalised and plotted across the four growth goals.

To improve recommendations over time As you publish posts and link them back to your Clue Labs briefs, the platform builds a richer picture of what works for your specific account. This improves the accuracy of future recommendations for your account.

Your data is not sold to third parties. Clue Labs does not sell, license, or share your account data with advertisers, data brokers, or any third-party organisations.

Your data is not used to train recommendations for other accounts. The performance data from your Instagram account is used only to generate recommendations for your account. It does not feed into recommendations for other Clue Labs users.

Your data is not used for advertising. Clue Labs does not use your data to serve you advertising, either within the platform or through third-party channels.

Encrypted access tokens The access token that allows Clue Labs to read your Instagram data is encrypted at rest and in transit. It is never exposed outside of the secure infrastructure that handles data requests.

Nango OAuth infrastructure Your connection is managed by Nango, a specialist OAuth provider. Your login credentials are handled entirely by Meta's own systems — Clue Labs never receives or stores your Facebook or Instagram password.

Scoped access Clue Labs only requests the specific data permissions required to provide the service. It does not request access to data it doesn't need.

Data separation between accounts If you have multiple brands connected, each brand's data is stored and processed separately. There is no data bleed between accounts.

Your data is retained for as long as your subscription is active. If you cancel, your data is retained for 30 days and then permanently deleted. You can request deletion at any time by contacting the team via the in-platform chat.

See the article on what happens to your data if you cancel for full details.

Clue Labs uses anonymised, aggregated performance patterns across its user base to improve the benchmarks that contextualise your Clue Score and performance data — for example, understanding typical engagement rate ranges for accounts of different sizes. This data is fully anonymised and cannot be traced back to any individual account. Your specific post content, captions, and account identity are never included in any aggregated analysis.

Is my data shared with Meta or Instagram? Clue Labs uses Meta's API to read your data — the data flows from Meta to Clue Labs, not the other way around. Clue Labs does not send your data back to Meta beyond the standard OAuth token refresh process.

Can Clue Labs employees see my posts and data? Authorised team members may access account data for the purposes of diagnosing technical issues or providing support. This access is logged and controlled. Your data is never accessed for commercial or marketing purposes.

I'm an agency connecting client accounts — is my clients' data kept separate? Yes. Each connected brand is a separate data environment. Your clients' data is scoped to their brand account and is not visible to or shared with any other brand on your account.

Does Clue Labs comply with GDPR? Yes. Clue Labs operates in compliance with GDPR. You have the right to access, correct, and request deletion of your data at any time. Contact the team via the in-platform chat to make a data request.

Where is my data stored? Contact the team for specific information about data storage locations and infrastructure if required for compliance purposes.