1. Introduction
Welcome to CreatorsCart ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services, including our Instagram automation features.
By using CreatorsCart, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
2. Information We Collect
2.1 Personal Information
We collect information that you provide directly to us, including:
- Account information (name, email address, username, password)
- Profile information (bio, profile picture, contact details)
- Payment and billing information
- Communications with us (support requests, feedback)
2.2 Instagram Data
When you connect your Instagram Business account to CreatorsCart, we collect and process the following Instagram data:
- Instagram User ID and Username: To identify your Instagram account and display your connection status
- Access Token: Encrypted and stored securely to authenticate API requests on your behalf
- Comments on Your Posts: To detect trigger keywords and enable automated responses
- Commenter Information: Username and user ID of people who comment on your posts (only when they trigger automation rules)
- Instagram Posts and Media: Post details including captions, media type (photo, video, reel), media URLs, thumbnails, and permalinks
- Engagement Metrics: Like counts and comment counts on your posts (when available through the API)
- Direct Messages: Only messages sent by our automation system on your behalf (we do not read or store your existing DMs)
2.3 Usage Information
We automatically collect information about your use of our services:
- Device information (browser type, operating system, IP address)
- Usage data (pages visited, features used, time spent)
- Analytics data (automation performance, message delivery rates)
3. How We Use Your Information
3.1 Platform Services
We use your information to:
- Provide, maintain, and improve our services
- Create and manage your account
- Process transactions and send related information
- Provide customer support and respond to inquiries
3.2 Instagram Automation
We use Instagram data specifically to:
- Monitor Comments: Detect when followers comment with your defined trigger keywords
- Send Automated Messages: Send personalized direct messages containing your storefront link and custom messages
- Sync Instagram Content: Automatically sync your Instagram posts and reels to your CreatorsCart content library
- Track Performance: Provide analytics on automation effectiveness, message delivery, and engagement
- Product Attachment: Enable you to link your CreatorsCart products to specific Instagram posts for tracking purposes
- Prevent Spam: Enforce rate limits and duplicate prevention to keep your account compliant with Instagram policies
3.3 Communications
We may use your information to:
- Send you service-related notifications
- Notify you about automation errors or rate limit warnings
- Provide updates about new features and improvements
4. Data Retention
We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:
- Account Information: Retained until you delete your account
- Instagram Access Tokens: Retained while your Instagram account is connected; deleted immediately upon disconnection
- Automation Analytics: Retained for 30 days, then automatically deleted
- Instagram Posts: Retained while your Instagram account is connected; deleted when you disconnect or delete your account
- Comment and Message Logs: Retained for 30 days for analytics purposes, then automatically deleted
5. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: Instagram access tokens are encrypted using AES-256 encryption
- HTTPS: All data transmission uses secure HTTPS connections
- Access Controls: Strict access controls limit who can access your data
- Regular Security Audits: We regularly review and update our security practices
- Webhook Validation: All Instagram webhook requests are validated using cryptographic signatures
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Data Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following circumstances:
- With Your Consent: When you explicitly authorize us to share information
- Service Providers: With trusted third-party service providers who assist in operating our platform (e.g., hosting, analytics)
- Instagram/Meta: API requests to Instagram are made using your access token to perform actions you've authorized
- Legal Requirements: When required by law, court order, or government request
- Business Transfers: In connection with a merger, acquisition, or sale of assets
7. Your Rights and Choices
You have the following rights regarding your information:
- Access: Request access to the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (see our Data Deletion Instructions page)
- Disconnect Instagram: Disconnect your Instagram account at any time from your dashboard
- Control Automation: Enable, disable, or delete automation rules at any time
- Export Data: Request a copy of your data in a portable format
To exercise these rights, please contact us at privacy@creatorscart.com
8. Instagram Data Usage Compliance
Our use of Instagram data complies with Meta's Platform Terms and Policies:
- We only access Instagram data that you explicitly authorize through OAuth
- We use Instagram data solely to provide the automation features you've enabled
- We do not use Instagram data for advertising or marketing purposes
- We implement rate limiting to prevent spam and ensure compliance with Instagram policies
- We respect Instagram's API usage limits and guidelines
9. Children's Privacy
CreatorsCart is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our services, you consent to the transfer of your information to these countries.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us: