Privacy Policy
Last updated: May 17, 2026
1. Introduction
Instamagic ("we", "our", or "us") operates the website instamagic.org and provides Instagram automation services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
We collect information in the following ways:
2.1 Information You Provide
- Account registration details (name, email address)
- Instagram account information when you connect your account via Instagram Business Login
- Automation rules and message templates you create
2.2 Information Collected Automatically
- Instagram media and comments data (via Instagram Graph API)
- Usage data such as pages visited, features used, and interaction patterns
- Device and browser information
2.3 Instagram Data
When you connect your Instagram account, we access data through the Instagram Graph API including your profile information, media posts, comments on your posts, and the ability to send direct messages on your behalf. We only access data that is necessary to provide our automation services.
3. How We Use Your Information
- To provide and maintain our Instagram automation service
- To process comments on your Instagram posts and trigger automated responses
- To send direct messages on your behalf based on your automation rules
- To display your Instagram media within our dashboard
- To communicate with you about service updates and support
- To improve our service and develop new features
4. Data Storage & Security
Your data is stored securely using industry-standard encryption and security practices. We use Supabase for our database infrastructure, which provides enterprise-grade security including row-level security, encryption at rest, and SSL/TLS encryption in transit.
Instagram access tokens are stored securely and are used solely to interact with the Instagram API on your behalf. We do not share your tokens with third parties.
5. Data Sharing
We do not sell, trade, or rent your personal information. We may share data with:
- Service providers — Third-party services that help us operate our platform (hosting, database, analytics)
- Legal requirements — When required by law, court order, or governmental authority
- Business transfers — In connection with a merger, acquisition, or sale of assets
6. Data Retention & Deletion
We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your data at any time by contacting us at support@instamagic.org or by using our data deletion process.
When you disconnect your Instagram account or delete your Instamagic account, we will delete all associated Instagram data, including access tokens, media references, automation rules, and message history.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent for data processing
- Disconnect your Instagram account at any time
- Export your data in a portable format
8. Cookies
We use essential cookies to maintain your session and authentication state. We do not use third-party tracking cookies or advertising cookies.
9. Children's Privacy
Our service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
support@instamagic.org