Privacy Policy

Information We Process

• Account information provided by Facebook during login (e.g., name, Facebook user ID, email if granted).
• Connected assets: Facebook Pages and linked Instagram Business/ Creator accounts you choose to manage.
• Insights data returned by the Meta Graph API (e.g., aggregated demographics and engagement metrics). We request scopes limited to what is necessary for insights: email, public_profile, pages_show_list, pages_read_engagement, instagram_basic, instagram_manage_insights.
• Authentication tokens issued by Facebook during OAuth. In our current implementation, tokens are stored only in an encrypted session/JWT cookie via NextAuth and are not persisted in a database.
• Technical data such as device/browser information and server logs generated when using the Service.

How We Use Information

• Authenticate you and connect eligible Pages and IG accounts.
• Retrieve and display insights you request from the Graph API.
• Provide support, debug issues, and secure the Service.
• Comply with legal obligations and platform policies.

Data Sharing

We do not sell personal information. We may share limited data with service providers (e.g., hosting and infrastructure vendors) solely to operate the Service, and with authorities when required by law.

Retention

We do not intentionally persist Facebook access tokens or insights data to a database. Tokens are held in session and expire per the platform. Server logs are retained for a limited period for security and troubleshooting. If we introduce persistent storage in the future, we will update this policy to describe retention periods.

Cookies

We use essential cookies to maintain your authenticated session. We do not use advertising cookies.

Your Choices & Rights

• You may revoke our access in your Facebook account settings at any time. This stops further data access.
• To request deletion of any data we control, follow the steps at/data-deletionor email us at support@instademos.xyz.
• Depending on your location, you may have rights to access, update or erase your information. Contact us to exercise these rights.

Children�s Privacy

The Service is not intended for children under 13, and we do not knowingly process information of children.

International Transfers

Our infrastructure and providers may operate in multiple countries. By using the Service, you understand your information may be transferred and processed outside your country of residence, subject to appropriate safeguards.

Third-Party Services

Our Service integrates with third parties including Meta (Facebook and Instagram), NextAuth, and hosting providers. Your use of these services is subject to their respective terms and privacy policies.

Changes to This Policy

We may update this Policy from time to time. We will revise the "Last updated" date above and, when appropriate, notify you by additional means.

Contact

Questions about this Policy can be sent to support@instademos.xyz.