Tallyterms

Owned audience and tool stack

Can you export your followers list? What each platform lets you take, and how to move followers to email lawfully

By the Tallyterms editorsPublished 28 September 2026

Checked

On this page
  1. What does each platform's data download contain about your followers?
  2. How long does a download take, and how long does the file stay?
  3. What do the platforms' terms say about scraping follower data?
  4. How do you move followers to an email list lawfully?
  5. How do you keep your audience if an account is lost?
  6. Frequently asked questions
  7. Sources

The rule

You can export your followers list on some platforms, never how to reach them. X's archive lists your followers, TikTok documents a follower record, and Instagram and Facebook export a connections category. None lists followers' email addresses, and all five bar scraping without permission.

Checked Primary sources

So an email list has to be built a second time, by followers who sign up themselves. This page puts the official exports next to the rules for that second step: prior consent for marketing email in the EU, CAN-SPAM's duties in the US, and a checklist for keeping your audience if an account is lost. An account can carry your payouts as well as your audience; the program rules are in monetization requirements by platform.

Every platform page and law below was opened on 28 September 2026. Platform terms are paraphrased; the law is quoted. This is a reading of those sources, not legal advice.

What does each platform's data download contain about your followers?

Checked

Platform Where to request it What the platform says about followers Followers' contact details Source
Instagram Accounts Center: Your information and permissions, Export your information A Connections category: who you have connected with on Instagram, and how. The page does not list the fields Not listed Instagram Help
TikTok Settings and privacy, Account, Download your data The Download your data help page does not mention followers. TikTok's Data Portability API reference, which documents the full data archive, lists a Follower record with two fields, date and username, and a Following record with the same two Not listed TikTok Support, TikTok for Developers
YouTube Google Takeout for the account; the subscriber list in YouTube Studio Takeout's help page names YouTube videos, not subscribers. Studio's subscriber list shows only viewers who made their subscriptions public, and subscriptions are private by default Not listed Google Account Help, YouTube Help, YouTube Help
X Settings and privacy, Account, Your X data The archive includes a list of your followers and a list of the accounts you follow. X does not list the fields per entry Not listed X Help
Facebook profile Meta Account settings: Your information and permissions, Export your information A Connections category that covers friends and followers Not listed Facebook Help, Facebook Help
Facebook Page The Page's Settings, Download your information; needs Facebook access with full control You pick the categories; the help page does not list them Not listed Facebook Help

"Not listed" means the platform's own description of the download does not mention it. TikTok's reference does show phone and email fields, but under Autofill, a separate category from the follower record. TikTok also warns that some data may be left out of a download, naming data that affects the privacy of others as an example (TikTok Support).

The most any of these exports gives you is a list of handles. It still has uses: a dated record of who followed you, and names to look for if you rebuild somewhere else. It cannot be emailed.

How long does a download take, and how long does the file stay?

Checked

Platform Preparation time, as the platform states it Download window Source
Instagram Up to 30 days for the email with the export link 4 days Instagram Help
TikTok A few days; the last 24 to 48 hours of some data categories may be missing Up to 4 days TikTok Support
YouTube, via Google Takeout A few minutes to a few days; most people get the link the same day About 7 days, and each archive can be downloaded 5 times Google Account Help
X A few days Not stated X Help
Facebook profile Not stated; the export request expires after a few days 4 days Facebook Help
Facebook Page Not stated The link expires after 4 days Facebook Help

Formats: Facebook offers HTML or JSON. X delivers a .zip with HTML and JSON files. Instagram, TikTok and Facebook Pages ask you to choose a format when you request.

A 4-day window is short. If the notification lands while you are away, the file is gone and the wait starts again.

What do the platforms' terms say about scraping follower data?

Checked

Platform What the terms say, paraphrased Version read Source
Instagram No accessing or collecting information in an automated way without Instagram's express permission, whether or not you are logged in. No selling, licensing or buying data obtained from the service; collecting Instagram usernames is named among the examples Effective 1 January 2025 Instagram Terms of Use
Meta, across Instagram and Facebook Automated data collection needs Meta's express written permission, obtained through a separate authorization process. Accepting the Automated Data Collection Terms is not that permission Effective 7 October 2024 Meta Automated Data Collection Terms
Facebook No accessing or collecting data by automated means without prior permission, logged in or not Effective 1 January 2025 Facebook Terms
TikTok US: no scraping, crawling, exporting or extracting data by automated systems or bots without written approval. EEA, Switzerland and UK: no extracting data with automated software TikTok did not provide or approve in writing. Other regions: no automated scripts to collect information US: 15 July 2026. EEA: July 2026. Other regions: 1 December 2025 US terms, EEA terms, other regions
YouTube No automated access by robots, botnets or scrapers, except public search engines following robots.txt or with prior written permission. No collecting information that might identify a person, usernames included, unless that person permits it Effective 15 December 2023 (US version) YouTube Terms of Service
X Both versions: no access by any method other than X's published interfaces, and crawling or scraping in any form without X's prior written consent is expressly prohibited. Both carry liquidated damages for requesting, viewing or accessing more than 1,000,000 posts in any 24-hour period: $15,000 per 1,000,000 posts outside the EU, EFTA States and UK, EUR 15,000 per 1,000,000 posts inside them. The versions taking effect on 9 October 2026 keep both amounts Outside the EU, EFTA States and UK: 10 April 2026. Inside them: 15 January 2026 X Terms of Service

A scraped list fails twice. It breaks the terms above, and for recipients in the EU it comes with no consent, which marketing email needs (next section). A bought list fails the same way, and Instagram's terms bar buying data obtained from the service in the first place.

How do you move followers to an email list lawfully?

The route that survives all of the rules above: followers give you their address themselves, on a signup page you control, linked from your profiles. What that page and every email must then do depends on where your subscribers are. What a newsletter service or signup page costs each month is on the creator tool stack page; this page does not compare them.

Marketing email needs prior consent. Article 13(1) of the ePrivacy Directive allows electronic mail for direct marketing "only in respect of subscribers or users who have given their prior consent" (ePrivacy Directive, consolidated). A directive works through each member state's national law, so check your country's version.

There is one exception, for customers. Under Article 13(2), if you obtained a customer's email address in the course of selling them a product or service, you may market your own similar products or services to it. The customer must be given a clear, free and easy chance to object when the address is collected and in every message. For a creator who sells merch or a course, that covers those buyers for similar products. It does not cover followers who never bought anything.

What counts as consent is set by the GDPR. Article 4(11) defines it as "any freely given, specific, informed and unambiguous indication of the data subject's wishes", given "by a statement or by a clear affirmative action". Recital 32: "Silence, pre-ticked boxes or inactivity should not therefore constitute consent." Article 6(1)(a) makes consent one of the lawful bases for processing (GDPR). Article 7 sets four conditions:

GDPR, Article 7 What it asks On a signup form
7(1) The controller "shall be able to demonstrate" consent Keep a record of each signup: date and time, which page or link it came from, the wording shown
7(2) A consent request inside a wider declaration must be "clearly distinguishable from the other matters" Newsletter consent gets its own box or step, not a clause in giveaway or contest terms
7(3) Consent can be withdrawn at any time; "It shall be as easy to withdraw as to give consent"; people are told this before consenting Say on the form that they can leave at any time, and put an unsubscribe link in every email
7(4) Whether a service is made conditional on consent the service does not need A free download offered only in exchange for newsletter consent is the case this paragraph tests. Offering the download with the newsletter box optional avoids the question

Three more articles apply to a list:

  • Article 13(1): at the time the address is collected, tell people who you are and how to contact you, the purposes and legal basis, the recipients (for example the email service that stores the list) and any transfer outside the EU.
  • Article 21(2) to (4): subscribers can object to direct marketing at any time, and the processing then stops. The right must be brought to their attention explicitly, at the latest in the first message, "clearly and separately from any other information".
  • Article 3(2)(a): the GDPR applies to a controller outside the EU that processes personal data of people in the EU while offering them goods or services, "irrespective of whether a payment of the data subject is required". A creator in the US with EU subscribers should read that paragraph before assuming the rules stay in Europe.

Article 83(5) sets fines of up to EUR 20,000,000 or, for an undertaking, 4% of total worldwide annual turnover in the preceding financial year, whichever is higher, for breaches that include the conditions for consent.

US: CAN-SPAM

The FTC's guide says the CAN-SPAM Act covers "all commercial messages", meaning email whose primary purpose is to advertise or promote a commercial product or service, "including email that promotes content on commercial websites". It makes no exception for business-to-business email (FTC).

Opt-in consent is not on the FTC's list of main requirements. The list is about honesty and opting out:

FTC requirement What it means for a creator's list
No false or misleading header information From, To, Reply-To and routing information must be accurate and identify who sent the message
No deceptive subject lines The subject line must reflect the content
Identify the message as an ad Disclose clearly and conspicuously that a promotional email is an advertisement: a merch drop, a course launch, a sponsor's offer
Tell recipients where you are located A valid physical postal address: your street address, a PO box registered with the US Postal Service, or a private mailbox registered with a commercial mail receiving agency
Tell recipients how to opt out A clear explanation and a return email or other easy internet-based way. A menu of message types is allowed if it includes stopping all marketing
Honor opt-outs promptly Within 10 business days. The mechanism must work for at least 30 days after sending. No fee, no information beyond an email address, no step beyond a reply or a visit to one web page
Monitor what others do on your behalf The company whose product is promoted and the company that sends the message can both be held responsible, which matters for sponsor slots

The FTC puts the penalty at up to $53,088 for each email in violation. Subscribers and members keep the right to opt out of marketing email even though they subscribed.

One signup form for both

EU rules are stricter, and one list often holds subscribers from both sides. A form built to the EU rules also meets the US ones. Each line below traces to a rule above.

At signup:

  • A separate, unticked checkbox, or a signup step that does nothing else. GDPR Recital 32, Article 7(2)
  • What you will send, including whether emails carry ads or sponsor content. GDPR Article 4(11) (specific, informed) and 13(1)(c)
  • Your name or business name and a contact address. GDPR Article 13(1)(a)
  • Which email service stores the list, and any transfer outside the EU. GDPR Article 13(1)(e) and (f)
  • A line saying people can unsubscribe at any time. GDPR Article 7(3)
  • A stored record per signup: timestamp, source link, form wording. GDPR Article 7(1)

In every email:

  • An unsubscribe link that works for at least 30 days after sending, with requests honored within 10 business days. FTC
  • Your physical postal address. FTC
  • Promotional content identified as advertising. FTC
  • A sender identity that is not disguised, and a valid address for opting out. ePrivacy Directive Article 13(4)
  • In the first email, the right to object to direct marketing, stated separately. GDPR Article 21(4)

How do you keep your audience if an account is lost?

  1. Put the signup link on every profile now. The time to collect addresses is while the account is up.
  2. Schedule exports where the platform offers it. Instagram and Facebook let you export to an external service and choose how often (Instagram Help, Facebook Help). Google Takeout can create an archive every 2 months for one year (Google Account Help). X's help page and TikTok's download steps describe one request at a time, so set a reminder for those. TikTok's ongoing transfer to a third-party service is offered only in the EEA and the UK (TikTok Support).
  3. Download inside the window. 4 days on Instagram, Facebook and TikTok. About 7 days and 5 downloads on Takeout.
  4. Keep your X email address confirmed. X sends the archive link to the confirmed address, and you must be logged in on the same browser to download it (X Help).
  5. Export before you deactivate or delete. Meta cannot export a deactivated profile or one scheduled for deletion until you reactivate it or cancel the deletion (Instagram Help, Facebook Help). A deleted Facebook profile's information cannot be accessed.
  6. Switch to the Brand Account on YouTube. If your channel is linked to a Brand Account, switch into that Brand Account before you request Takeout; Google names this as the reason some YouTube videos do not download (Google Account Help).
  7. Mind TikTok's gap. The last 24 to 48 hours of some data may be missing; request again later if you need them (TikTok Support).
  8. Keep the list and the consent records exportable. The signup records are the proof Article 7(1) asks for. They should survive a change of email service as well as the loss of a platform account.
  9. If you are locked out, ask anyway. Instagram's help page says to contact it for an export when you cannot access the account (Instagram Help). Strike and appeal routes for each platform are in account strikes and appeals by platform.

Frequently asked questions

Can I download my Instagram followers' email addresses?

No. Instagram's description of its export lists a Connections category, not followers' contact details (Instagram Help). Its terms bar automated collection without permission and buying data obtained from the service (Instagram Terms of Use).

Can I see who my YouTube subscribers are?

Only the ones who made their subscriptions public. YouTube Studio's subscriber list shows public subscriptions only, and subscriptions are private by default. The Recent subscribers card lists subscribers whose subscriptions are public and who subscribed in the last 28 days (YouTube Help, YouTube Help).

Does the GDPR apply to a US creator's newsletter?

It can. Article 3(2)(a) extends it to controllers outside the EU that process personal data of people in the EU while offering them goods or services, whether or not they pay (GDPR). The ePrivacy consent rule for marketing email applies through EU member states' national law.

Can I add people who bought my merch to my newsletter?

In the EU, Article 13(2) of the ePrivacy Directive allows marketing of your own similar products to customers whose address you got in a sale, if they could object when you collected it and can object in every message. In the US, CAN-SPAM's duties apply to every commercial email whether or not the recipient bought from you (FTC).

Sources

Opened and checked on 2026-09-28.

Written by the Tallyterms editors. Each rule links its primary source, opened on the date shown; how that works is in the editorial policy. Not legal or tax advice.