Privacy Policy

Last updated: February 28, 2026

1. Introduction

This Privacy Policy describes how our internal Instagram management tool ("the App") collects, uses, and protects information. The App is a first-party tool used exclusively by our business to manage our own Instagram Business account. It is not a public-facing product or SaaS offering.

2. Information We Collect

When you authenticate with Facebook Login, the App receives:

• Your Facebook Page ID and associated Instagram Business Account ID
• A Page access token (used to make Instagram Graph API calls on behalf of our business)

The App also accesses the following data from our own Instagram Business account via the Instagram Graph API:

• Media posts (captions, media type, timestamps)
• Comments on our posts (text, usernames, timestamps)
• Direct message conversations and messages

3. How We Use Information

All data accessed through the App is used solely for managing our own Instagram Business account, including:

• Viewing and managing our media posts
• Reading, replying to, hiding, and deleting comments on our posts
• Reading and replying to direct messages sent to our business
• Optionally publishing content to our Instagram account

4. Data Storage

Access tokens are stored in server memory only and are not persisted to any database or file system. Tokens are discarded when the server restarts. No user data from Instagram is stored permanently by the App.

5. Data Sharing

We do not sell, rent, or share any data obtained through the App with third parties. All data remains within our organization and is used exclusively for internal business purposes.

6. Data Retention

The App does not retain any Instagram data beyond the active session. Once the server is restarted or the session ends, all tokens and cached data are cleared.

7. Data Deletion

Since the App does not permanently store user data, there is no data to delete. If you wish to revoke the App's access, you may do so through your Facebook account settings under Apps and Websites.

8. Security

We take reasonable measures to protect information accessed through the App, including:

• Keeping access tokens server-side only (never exposed to the browser)
• Using the App exclusively within our internal network
• Limiting access to authorized personnel within our organization

9. Third-Party Services

The App integrates with the following third-party services:

• Facebook Login — for authentication
• Instagram Graph API — for accessing and managing our Instagram Business account

Use of these services is governed by Meta's Privacy Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated revision date.

11. Contact

If you have questions about this Privacy Policy, please contact us at our business email address.