Privacy Policy
Last updated: January 6, 2026
1. Information We Collect
We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support. This may include your name, email address, and any other information you choose to provide.
1.1 Information Collected Automatically
When you use our services, we automatically collect certain information about your device and usage, including:
- Browser information (type, version, language settings)
- Server information (IP address, device identifiers)
- Usage information (pages visited, features used, time spent)
- Cookies and similar tracking technologies
1.2 Information from Third-Party Services
When you connect your Instagram account through our service, we collect information from Meta (Facebook) and Instagram via their APIs with your explicit consent. This includes:
- Instagram Business Account Information: Account ID, username, account type, and basic profile information (collected via
instagram_business_basicpermission) - Facebook Page Information: Page ID, page name, and page access tokens (collected via
pages_show_listpermission) - Instagram Messages: Inbound and outbound direct messages, including message content, sender information, timestamps, and message IDs (collected via
instagram_business_manage_messagespermission) - Conversation Data: Conversation participants, message threads, and related metadata
- Sender Information: Instagram user IDs, usernames, and display names of users who send messages to your connected Instagram account
We only collect this information after you explicitly grant permission through the Meta OAuth authorization flow. You can revoke these permissions at any time by disconnecting your Instagram account in your account settings.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service Provision: To provide, maintain, and improve our services, including message management, conversation organization, and AI-powered features
- Instagram Messaging: To receive, process, store, and send Instagram direct messages on your behalf when you connect your Instagram Business Account
- Message Processing: To analyze message content using AI for sentiment analysis, priority scoring, tag suggestions, and reply generation
- Conversation Management: To group messages into conversations, identify message senders, and organize your inbox
- Account Management: To recognize you when you return to our service, maintain your account preferences, and provide personalized features
- Communication: To send you technical notices, support messages, and respond to your inquiries
- Marketing: To communicate with you about products, services, and promotional offers (only if you opt-in)
- Analytics: To understand how our services are used, identify trends, and improve user experience
- Security: To detect, prevent, and address technical issues, fraud, or security threats
2.1 Processing of Instagram and Facebook Data
When you connect your Instagram account, we process data from Meta's platforms for the following specific purposes:
- Message Reception: We receive webhook notifications from Meta when new messages arrive at your Instagram Business Account
- Message Storage: We store message content, metadata, and sender information in our secure database to provide you with a unified inbox
- Message Sending: We send replies to Instagram messages on your behalf using Meta's Messaging API
- Sender Identification: We use Instagram user IDs and usernames to identify and display message senders in your inbox
- AI Enhancement: We analyze message content using AI to provide sentiment analysis, priority scoring, and suggested replies
All processing of Instagram and Facebook data is done in accordance with Meta's Platform Terms and our agreement with you. We do not share your Instagram messages or account information with third parties except as described in Section 3 below.
3. Information Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy. We may share your information in certain limited circumstances, such as with service providers who assist us in operating our platform.
3.1 Requests from Public Authorities
We may be required to disclose personal information in response to valid legal requests from public authorities, including law enforcement agencies, courts, or government entities. Our policies regarding such requests include:
- Legal Review: We review all requests from public authorities to ensure they are legally valid and comply with applicable laws and regulations.
- Challenging Unlawful Requests: We reserve the right to challenge any request that we believe is unlawful, overly broad, or not properly authorized. We will seek to narrow the scope of requests when appropriate.
- Data Minimization: When responding to valid legal requests, we disclose only the minimum amount of information necessary to comply with the request and applicable law.
- Documentation: We maintain records of requests from public authorities, including the nature of the request, the legal basis, the information disclosed (if any), and our response. We document our legal reasoning and the actors involved in processing such requests.
We will notify users of requests for their personal information when legally permitted and not prohibited by law or court order. We are committed to protecting user privacy while complying with valid legal obligations.
4. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and use personal information about you. You can control cookies through your browser settings, but disabling cookies may affect the functionality of our service.
6. Marketing Communications
If you opt-in to receive marketing communications, we may send you emails about our products, services, and promotional offers. You can unsubscribe from these communications at any time by clicking the unsubscribe link in our emails or contacting us directly.
7. Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
8. Your Rights
Depending on your location, you may have certain rights regarding your personal information, including the right to access, update, or delete your information. You may also have the right to object to or restrict certain processing of your information.
9. Third-Party Services
Our service integrates with third-party services, including:
- Meta (Facebook/Instagram): When you connect your Instagram account, we use Meta's APIs to access your Instagram Business Account information and messages. Your use of Meta's services is subject to Meta's Privacy Policy and Platform Terms. We only access data you explicitly authorize through the OAuth consent flow.
- Other Third-Party Services: Our service may contain links to other third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.
10. Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
13. Data Deletion Requests
You have the right to request deletion of your personal information, including data collected from Instagram and Facebook. To request deletion of your data:
- Email: Send a request to hello@inexraai.com with the subject line "Data Deletion Request"
- Account Settings: You can disconnect your Instagram account in Settings → Integrations → Instagram, which will stop new data collection
- Account Deletion: You can delete your entire account in Settings → Account, which will permanently delete all associated data
When you request data deletion, we will:
- Delete all messages and conversation data stored in our systems
- Remove your Instagram account connection and associated tokens
- Delete your account information and preferences
- Remove your data from our analytics and reporting systems
Please note that some information may be retained for legal or regulatory purposes (e.g., transaction records) as required by law. We will respond to your deletion request within 30 days.
14. Contact Us
If you have any questions about this privacy policy or our data practices, please contact us:
- Email: hello@inexraai.com
- Data Deletion Requests: hello@inexraai.com (subject: "Data Deletion Request")
- Support Channels: Available through our in-app support system