Privacy Policy

Scope

This policy applies only to a closed pre-production Instagram integration test involving two founder-controlled tester accounts. Participation is voluntary and has been explicitly authorized by the owners of both accounts. The test is not available to genuine customers or the public.

Data processed

The controlled test may process:

• Instagram account and message identifiers for the two testers;
• the controlled text message and one fixed technical reply;
• signed webhook payload data and deduplication evidence;
• event, processing, acceptance, failure, delivery, and receipt timestamps;
• bounded technical status, correlation, and error evidence; and
• sanitized local operational logs.

Purpose

Data is used only to verify secure webhook intake, correct routing, duplicate-safe processing, one deterministic non-AI reply, delivery evidence, and safe disablement of the test integration.

What is excluded

The test does not intentionally include genuine customers, advertising, sale of data, payments, orders, product data, media, images, audio, voice notes, or AI/model processing. Test data is not used for profiling, model training, or marketing.

Platforms and limited disclosure

Meta is the messaging platform and independently processes data in its Instagram systems. Cloudflare hosts these public policy pages and may also provide secure network transport for a separately authorized technical test. Cloudflare infrastructure may process ordinary request metadata under Cloudflare's own terms and policies.

Access to controlled-test application data is limited to the operator, an explicitly authorized technical operator if needed, and the restricted technical systems required to conduct and verify the test. The operator does not sell the data or disclose it to advertisers.

Storage and protection

Controlled-test application data is kept in an isolated founder-controlled pre-production environment. Access is restricted, credential values are separated from application records, and public responses and logs are designed to avoid exposing message contents or credentials unnecessarily.

Retention

Controlled-test application data is targeted for deletion as soon as verification is complete and will not be retained for more than 30 calendar days from collection, unless retention is legally required. This maximum covers raw webhook payloads, normalized messages, and durable technical evidence. Sanitized local logs will be deleted within seven calendar days. No backups are created for this test.

Access and deletion

A controlled tester may request access to or deletion of test data by emailing sultan.ad699@gmail.com. No login is required. Requests are acknowledged within seven calendar days and completed within 30 calendar days, unless retention is legally required.

Account control is confirmed manually through the affected Instagram tester account or its previously confirmed contact channel. The operator will never request a password, access token, recovery code, or identity document for this process.

See the Data Deletion Instructions for the information to include.

Policy-page privacy

The operator does not intentionally use application cookies, analytics, tracking, forms, or advertising on these policy pages. Cloudflare may apply its own service or security technologies and may process ordinary network metadata under its own policies.

Contact

Operator: SAAS-APP-ALYAQDHAN
Email: sultan.ad699@gmail.com