Effective date: October 7, 2026
This policy explains how Actionpackd (Chennai, Tamil Nadu, India) handles data when a business connects an Instagram professional account to Actionpackd.
Through the Instagram Graph API / Meta APIs, with the account owner's permission: basic profile information (account ID, username, name, profile picture); direct messages sent to and from the connected account; comments on the connected account's media and related metadata (timestamps, IDs).
Only to provide the service: showing conversations and comments to the business, generating and sending AI-assisted replies the business configures, and operating, securing and supporting the service.
We do not sell personal data or use Instagram data for advertising. We share it only with service providers needed to run the service (hosting, AI processing) under confidentiality obligations, or when required by law.
We keep data while the account remains connected and the business uses Actionpackd. When an account is disconnected or deletion is requested, we delete the related data within 30 days, unless law requires longer retention.
Data is encrypted in transit (HTTPS), access tokens are stored securely, and access is limited to authorised personnel.
You can request access, correction or deletion of your data, or withdraw consent, by emailing us. See Data Deletion Instructions.