Privacy Policy — InstaBot

1. Introduction

Welcome to InstaBot. We value your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, store, transmit, and safeguard the information you provide when using our platform for Instagram messaging automation, email campaigns, and custom applications creation.

2. Information We Collect

To provide you with our marketing and automation dashboard capabilities, we collect the following types of information:

Account Credentials: Username, email address, mobile number, and encrypted passwords stored locally inside our database when you sign up.
API Access Tokens: Meta Page Access Tokens and Instagram Business Account IDs configured in your local environment setup to authorize API interactions.
Marketing Data: Recipient lists (via custom IDs or uploaded CSV files) and message content that you dispatch during campaigns.

3. How We Use Your Information

Your details are processed to operate, optimize, and secure the InstaBot services, specifically for:

Validating and managing configurations (e.g. dynamically resolving Page credentials to send direct messages).
Processing bulk campaigns and providing status diagnostics in your CRM dashboard.
Maintaining local application security, user authentication, and profile tracking.

💡 Instagram Data Compliance Note: InstaBot interacts with Meta Graph APIs strictly on behalf of the page owner. We do not store or share Instagram conversations, participant information, or message history outside your local environment.

4. Data Storage & Security

We implement robust, state-of-the-art security measures to keep your data safe:

All user passwords are hashed using high-entropy BCRYPT encryption.
Environment parameters (like permanent Meta Access Tokens) are encrypted and stored in secure local configuration files (`.env`).
We do not sell, rent, or distribute your database content or list of contacts to third parties.

5. Compliance with Meta's Terms

Our integration with the Instagram Messaging API strictly adheres to Meta Developer Guidelines. Messages can only be sent to users who have voluntarily initiated a messaging window with your Facebook Page within the preceding 24 hours.

6. Contact Us