Last updated: [EFFECTIVE DATE]
This Privacy Policy explains how [CreatorLinksAI / Company Name] ("we", "us") collects, uses, and protects information when you connect your Instagram Business or Creator account to our service.
When you connect your Instagram account via Meta's OAuth flow, we access and store:
We do not collect your Instagram password. Authentication happens entirely through Meta's own login flow - we never see or store your credentials.
We use the information above solely to:
We do not sell your data, and we do not use it to train machine learning models without separate, explicit consent.
Access tokens are encrypted at rest (AES-256-GCM) before being stored. Data is retained for as long as your account remains connected.
You can disconnect your Instagram account at any time, which deletes your stored token and associated data immediately. You can also request deletion directly through Facebook's App Settings, which triggers the same process automatically via our Data Deletion callback.
We do not share your data with third parties, except as required to operate the service itself (e.g. our hosting provider) or as required by law.
You may request access to, correction of, or deletion of your data at any time by contacting us at [contact@example.com].
We may update this policy from time to time. Material changes will be posted on this page.
Questions about this policy: [contact@example.com]
This is a starting template, not legal advice. Have it reviewed by a lawyer before publishing, especially before submitting for Meta App Review or handling real user data.