Privacy Policy

1. Introduction

Insta Agent (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read it carefully.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and any other information you voluntarily provide. This is stored securely with Supabase Auth.

2.2 Instagram Data

With your authorization, we access the following via the Meta Instagram Graph API:

• Your Instagram Business/Creator profile information (username, name, profile picture, follower count)
• Your posts, reels, and stories (media content, captions, timestamps)
• Comments on your content (text, author, timestamp)
• Direct messages received through your account
• Analytics and insights data

This data is used solely to provide the Service's features and is stored in our database.

2.3 Usage Data

We collect usage data including API calls made on your behalf, subscription tier, feature usage, and general analytics. This helps us improve the Service.

2.4 Communication Data

When you contact support or communicate with us, we collect the content of those communications and your contact information.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send you technical notices, updates, and support messages
• Generate AI-powered replies to comments and direct messages on your behalf
• Display your Instagram content and analytics in the dashboard
• Detect, prevent, and address technical issues and abuse
• Comply with legal obligations

4. AI-Generated Content

When you enable AI auto-replies, our AI systems process the content of comments and messages received by your account to generate responses. These responses are stored in your account history. We use third-party AI providers (NVIDIA, OpenRouter) for this processing — see the section on third-party processors below.

5. Data Sharing

We do not sell, trade, or rent your personal information. We may share information in the following circumstances:

• With your consent — when you explicitly authorize sharing
• Service providers — trusted third parties who process data on our behalf (Supabase, AI providers, payment processors)
• Legal requirements — when required by law, court order, or to protect our rights
• Business transfers — in the event of a merger, acquisition, or sale of assets

6. Data Retention

We retain your account information for as long as your account is active or as needed to provide services. Instagram data (messages, comments) is retained until you delete it or close your account. You may request deletion of your data at any time — see Your Rights below.

7. Data Security

We implement industry-standard security measures including SSL/TLS encryption, secure data centers, access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Cookies and Tracking

We use cookies for authentication and session management. These are essential for the Service to function. We do not use third-party advertising cookies or tracking pixels.

9. Third-Party Processors

Your data may be processed by:

• Supabase — database and authentication (their privacy policy applies)
• Meta / Facebook — Instagram Graph API (Meta's privacy policy applies)
• NVIDIA — AI language model processing for auto-replies
• OpenRouter — alternative AI model processing

10. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it.

11. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate or incomplete data
• Delete your account and all associated data
• Export your data in a machine-readable format
• Withdraw consent for data processing where applicable
• Object to certain types of processing

To exercise these rights, contact us at privacy@instaagent.app. We will respond within 30 days.

12. International Data Transfers

Your data may be transferred to and processed in countries outside your own. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice in the Service. The date at the top indicates when this policy was last updated.

14. Contact

For questions about this Privacy Policy or to exercise your rights, contact our Data Protection team at:

Email: privacy@instaagent.app