MVRX Signal — https://signal.mvrx.app
Operated by MVRX Group (ABN 71 666 255 956)
Effective date: 11 June 2026
Contact: privacy@mvrx.app
MVRX Signal is a social media analytics service operated by MVRX Group (ABN 71 666 255 956), an Australian company. The service is available at signal.mvrx.app and gives Instagram account owners a clear view of their content performance — what worked, why, and what to try next.
Questions about this policy can be directed to privacy@mvrx.app.
We collect information through the Instagram API only after you authorise the connection using your Instagram professional account credentials. The authorisation flow is handled by Meta Platforms. We never see your Instagram password.
From the Instagram API we receive: your professional account profile (account ID, username, and display name); media metadata for your posts (captions, permalinks, thumbnail URLs, media type, and publish dates); video files and any auto-generated transcripts where available, used only for AI content analysis; and performance metrics including views, reach, likes, comments, shares, saves, average watch time, and follower counts.
We also store the OAuth access token issued by Meta so we can refresh your analytics on a scheduled basis. The token is held separately from your account record in Cloudflare KV storage and is never exposed in the application UI or logs.
Finally, we set a single signed session cookie (mvrx_session) when you sign in, which identifies your session for up to 30 days. No other cookies are used.
The information we collect is used solely to provide analytics and recommendations for your own Instagram account. Specifically: to display your content's performance metrics and trends; to run AI-assisted classification, summarisation, and recommendation — processed via Cloudflare Workers AI — so you understand what your content is doing and what to do next; and to generate periodic trend analyses and plain-English reports.
We do not use your information for advertising. We do not build profiles of your audience or followers. We do not combine your data with data from other connected accounts for any purpose other than account-level analytics that you explicitly requested.
All data handling is in accordance with the Meta Platform Terms and Meta's Developer Policies.
Your data is stored on Cloudflare, Inc. infrastructure: a D1 relational database for account records, media metadata, and daily metrics; Cloudflare KV for access tokens and session data; Cloudflare R2 object storage for raw API payload archives and media thumbnails; and Cloudflare Workers AI for on-demand AI inference.
Cloudflare is the only sub-processor with access to your data. We do not sell, rent, or share your personal information with any other third parties, except as required by law or as instructed by you.
MVRX Signal uses a single first-party session cookie (mvrx_session) to keep you signed in. It is a signed, stateless HTTP-only cookie that expires after 30 days or when you disconnect your account.
We do not use advertising cookies, cross-site tracking cookies, or any analytics cookies from third-party providers.
Your data is retained for as long as your Instagram account remains connected to MVRX Signal. When you disconnect your account (via the dashboard or by revoking access directly in Instagram's settings), we delete your stored access token, account record, media metadata, and associated metrics.
Meta also sends us a deauthorisation callback and a data-deletion callback when you remove MVRX Signal from your Instagram app permissions. Both callbacks are implemented and trigger the same cleanup. You can also request deletion at any time by visiting our Data Deletion page at signal.mvrx.app/data-deletion or by emailing privacy@mvrx.app.
Access tokens are stored in Cloudflare KV and referenced from your account record by a key only — the token value is never written to the main D1 database. All traffic to and from signal.mvrx.app is encrypted in transit using TLS. Access to the stored data is limited to the operator.
MVRX Signal handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You have the right to request access to, or correction of, the personal information we hold about you.
To exercise these rights, contact us at privacy@mvrx.app. If you are not satisfied with our response you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.
Cloudflare operates a global network. Data stored in Cloudflare D1, KV, R2, and Workers AI may be processed or replicated in data centres outside Australia as part of normal Cloudflare operations. Cloudflare maintains data transfer mechanisms consistent with applicable privacy law.
We may update this policy from time to time. When we do, we will post the revised version on this page with an updated effective date. Continued use of MVRX Signal after a change takes effect constitutes acceptance of the revised policy.