Where the numbers on a KitVerify kit come from.

1. Step 1

   The creator connects, not you

   You send a delegated connect link. The creator signs in to their own Instagram or TikTok and grants read-only access. Nothing is scraped, no password changes hands, and they can revoke it whenever they like.

2. Step 2

   KitVerify pulls what the API returns

   Followers, engagement, per-post numbers, top posts, and on Instagram the audience breakdowns — re-pulled once every 23 hours. Each figure arrives carrying the platform's name and the time it was pulled, and nothing between the API response and the page can edit it.

3. Step 3

   Every link reads from that one record

   The creator's public kit, each campaign roster they appear on, and the per-brand links on those rosters all resolve from the same record when someone opens them. You edit once; there is no second copy to chase.

Updated every day

Automatically, once a day. Each night the sync worker re-pulls every connected Instagram or TikTok account whose numbers are more than 23 hours old from the official API, longest-unrefreshed first. Opening a media kit or roster link queues the same refresh for any account past 23 hours — the page shows the current snapshot straight away and the next visitor sees the new one. Every synced number carries its own last-synced time, so a brand can always see how fresh it is. Nothing is refreshed more often than that: the platforms rate-limit their APIs, and hour-to-hour changes are too small to matter in a pitch.

The two things that trigger a refresh

• —The nightly pass. Once a day, every connected account whose numbers are more than 23 hours old is re-pulled, longest-unrefreshed first and spread across a night window rather than fired in a burst.
• —A brand opening your link. When someone opens a media kit or a roster, any account on it past 23 hours is queued for the same refresh. The page never waits for it — the brand sees the current snapshot immediately, and the next visitor sees the newer one.
• —Your own Resync button, when you want to see a change now. That one runs inside the request rather than the queue, and it skips accounts refreshed within the last 2 hours so a click cannot burn an API call for nothing.

Why not more often than daily

Both platforms rate-limit their APIs, and a single Instagram refresh is roughly thirty calls once per-post insights and the audience breakdowns are included. More to the point, an hour of follower movement is not something a brand can act on — but a number that is silently three months old is. So the cadence is a day, every synced number shows when it was last pulled, and a kit that has not re-synced in over 90 days flags its own numbers as stale rather than presenting them as current.

The connection belongs to the creator, not to the workspace. That is a deliberate constraint, and it is what makes a synced number mean something.

• —The connection is read-only. KitVerify can fetch numbers; it cannot post, message, follow, or change anything on the account.
• —The creator connects their own account. You send a delegated connect link, they sign in to Instagram or TikTok themselves — you never hold their password, and there is no shared login to rotate when someone leaves.
• —They can disconnect at any time, from their side or yours. Syncing stops; the numbers already on the kit keep their last-synced stamp, which is what makes a stale kit visibly stale instead of quietly wrong.
• —A synced number can be hidden from the public kit, but it cannot be edited. There is no path between the API response and the page where a figure could be adjusted — which is the whole reason the Synced label is worth anything.