Privacy Policy

Last Updated: August 2026

1. Information We Collect

We collect account information (such as name, email address, and optional phone number) provided during signup, and metadata required to operate your connected Instagram Business account.

2. Data Protection & Credential Storage

Instagram OAuth credentials and access tokens are encrypted and managed in Supabase Vault. Tokens never touch browser storage or client-side JavaScript.

3. Data Deletion & User Rights

Users can disconnect their Instagram account at any time. We support Meta data deletion callback requirements in accordance with Meta Platform Policy.