Privacy Policy

Last updated: July 26, 2026

This Privacy Policy explains how CreatorLinksAI ("we", "us") collects, uses, and protects information when you connect your Instagram Business or Creator account to our service.

1. Information We Collect

When you connect your Instagram account via Meta's OAuth flow, we access and store:

• Your Instagram Business Account ID and username
• Your linked Facebook Page ID and name
• Follower count, media count, and post/reel performance metrics (views, likes, comments, saves)
• An encrypted long-lived access token used to make these requests on your behalf
• Auto-DM rules, delivery records, and any PDF assets you upload for Auto-DM delivery
• Creator-approved campaign insight snapshots shared with a brand or agency

We do not collect your Instagram password. Authentication happens entirely through Meta's own login flow - we never see or store your credentials.

2. How We Use This Information

We use the information above solely to:

• Display your account's performance insights within our product
• Keep your connection active (automatic token refresh before expiry)

We do not sell your data, and we do not use it to train machine learning models without separate, explicit consent.

3. Data Storage and Security

Access tokens are encrypted at rest (AES-256-GCM). Uploaded Auto-DM PDFs are kept in private object storage and delivered through expiring links.

4. Data Deletion

Routine Disconnect Instagram deletes the active connection, encrypted token, and cached analytics. It does not delete your CreatorLinksAI account, Auto-DM configuration, independently supplied records, or historical campaign snapshots that you previously approved for agency reporting.

Creators may separately select Delete my Instagram data in Profile and Privacy settings. Full deletion permanently removes the connection and token, Instagram analytics, Auto-DM rules and delivery records, uploaded Auto-DM PDFs, and insight snapshots previously shared through CreatorLinksAI. Users may also initiate this process from Meta's Apps and Websites settings. We return a confirmation code and status URL for verified Meta deletion requests. Full Instagram-data deletion does not itself delete independently supplied invoices, media kits, billing records, or AI scripts.

5. Third-Party Sharing

We do not share your data with third parties, except as required to operate the service itself (e.g. our hosting provider) or as required by law.

6. Your Rights

You may request access to, correction of, or deletion of your data at any time by contacting us at support@creatorlinksai.com.

7. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page.

8. Contact

Questions about this policy: support@creatorlinksai.com

This is a starting template, not legal advice. Have it reviewed by a lawyer before publishing, especially before submitting for Meta App Review or handling real user data.