Privacy Policy & Data Deletion

🔒

Privacy Policy

For Instagram Direct & WhatsApp AI Automation Service

📋 1. Introduction

This Privacy Policy describes how [Company Name] ("we", "our", or "the Company") collects, uses, stores, and protects information obtained through our AI-powered chatbot service operating on Instagram Direct and WhatsApp Business platforms (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service immediately.

📦 2. Information We Collect

We collect only the minimum data necessary to operate the Service. Specifically, we may collect:

Message content — the text of messages you send to our AI assistant through Instagram Direct or WhatsApp in order to generate a relevant response.
Public Instagram profile information — your Instagram username (handle) and publicly available profile data provided by the Instagram API when you initiate a conversation.
WhatsApp contact identifier — your WhatsApp phone number hash, as provided by the WhatsApp Business API, solely to route responses back to you.
Conversation timestamps — the date and time of interactions, for operational and debugging purposes.

        We do NOT collect: passwords, payment information, precise location data,
        biometric data, private profile details, or any information beyond what is listed above.
        We do not access your camera, microphone, contacts, or any device-level data.
      

⚙️ 3. How We Use Your Information

The data we collect is used exclusively for the following purposes:

AI response generation — your message content is processed by a Large Language Model (LLM) to generate a relevant, helpful reply on behalf of the business you are communicating with.
Service delivery — routing messages, maintaining conversation context within a single session, and ensuring accurate responses.
Service improvement — aggregated, anonymized analytics may be used to improve bot accuracy and performance. No personally identifiable information is used for this purpose.
Legal compliance — retaining records as required by applicable law.

🤖 4. Third-Party AI Processing

To provide AI-generated responses, message content may be temporarily transmitted to and processed by third-party AI service providers, including but not limited to OpenAI, LLC (provider of GPT models). This transmission occurs solely for the purpose of generating a reply to your message.

Important: Third-party AI providers process your messages under their own privacy policies and data processing agreements. OpenAI's privacy policy is available at openai.com/privacy. We select providers that offer strong data protection guarantees and, where applicable, do not use submitted data to train their models.

🚫 5. Data We Do NOT Sell or Share

We are committed to protecting your privacy. We explicitly affirm:

We do not sell your personal data to any third party under any circumstances.
We do not use your data for targeted advertising, behavioral profiling, or retargeting campaigns.
We do not share your data with data brokers, advertising networks, or analytics platforms.
We do not transfer your data to any party other than the AI processing providers described in Section 4, and only for the stated operational purpose.

🗓️ 6. Data Retention

Conversation data is retained for a maximum of 90 days from the date of the last interaction, after which it is automatically and permanently deleted from our servers. You may request earlier deletion at any time — see the Data Deletion Instructions section below.

🛡️ 7. Data Security

We implement industry-standard security measures to protect your information, including:

Encryption in transit (TLS 1.2+) for all data transmissions.
Encrypted storage for any persisted conversation data.
Strict access controls — only authorized personnel may access operational data.
Regular security audits and vulnerability assessments.

No method of transmission or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

✅ 8. Meta Platform Compliance

Our Service operates through the Meta (Facebook) Platform, including the Instagram Messaging API and WhatsApp Business API. We comply with all applicable Meta Platform Policies, including restrictions on data use, and the WhatsApp Business Policy. We use data obtained from the Meta Platform only as permitted under those policies.

👦 9. Children's Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

⚖️ 10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right of access — to request a copy of the data we hold about you.
Right to rectification — to request correction of inaccurate data.
Right to erasure — to request deletion of your data (see instructions below).
Right to restrict processing — to request that we limit how we use your data.
Right to data portability — to receive your data in a structured, machine-readable format.
Right to object — to object to processing of your personal data.

To exercise any of these rights, please contact us at [Contact Email]. We will respond within 30 days.

🔄 11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. Continued use of the Service after changes constitutes acceptance of the revised policy.

✉️ 12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

[Company Name]
Privacy inquiries: [Contact Email]

🗑️

Data Deletion Instructions

Required by Meta · Facebook Platform Policy

In accordance with Meta (Facebook) Platform Policy and applicable data protection regulations (including GDPR and CCPA), you have the right to request the deletion of any personal data we have collected about you through your use of our Service.

        Your right to deletion is unconditional. Upon a valid request,
        we will permanently delete all message history, identifiers, and associated data
        linked to your account from our systems within 48 hours.
        You will receive a written confirmation upon completion.
      

📝 How to Request Data Deletion

Follow the steps below to submit a Data Deletion Request:

Compose an email using your registered email address or the contact associated with your Instagram / WhatsApp account.

Send it to: [Contact Email]

Use the exact subject line: Data Deletion Request

In the body of your email, please include:

Your Instagram username (handle), e.g. @yourhandle — if you used Instagram Direct.
Your WhatsApp phone number (with country code), e.g. +7 XXX XXX XXXX — if you used WhatsApp.
A brief description of your request (optional but helpful).

Wait for confirmation. We will process your request and send you a confirmation email within 48 hours confirming that your data has been permanently deleted.

📧 Sample Email Template

        
        To: [Contact Email]

        Subject: Data Deletion Request

          Hello,

          I would like to request the deletion of all personal data associated with my account.

          Instagram username: @my_instagram_handle

          WhatsApp number: +7 XXX XXX XXXX

          Please confirm once my data has been deleted.

          Thank you.

❓ Frequently Asked Questions

What data will be deleted?

All message history, conversation logs, your Instagram username or WhatsApp identifier, and any other data linked to your account in our systems will be permanently erased.

Can I be re-identified after deletion?

No. Deletion is permanent and irreversible. Once completed, we will have no record linking your identity to any prior interactions.

Does deletion affect data held by Meta?

This request covers only data stored in our systems. For data held by Meta (Facebook/Instagram), please submit a separate request via Meta's data deletion portal.

What if I don't receive a confirmation?

If you have not received a confirmation within 72 hours, please resend your request or contact us directly at [Contact Email].

        Automatic deletion: Even without a request, all conversation data is
        automatically and permanently deleted from our servers after
        90 days of inactivity, as stated in our Privacy Policy.
      

Back to Home