Privacy Policy
Last Updated: January 25, 2026
EngageAIQ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Instagram automation service.
1. Information We Collect
1.1 Information You Provide
- Account information (name, email address)
- Instagram Business account credentials (via OAuth)
- Payment information (processed by Stripe)
- Communications with us
1.2 Instagram Data
When you connect your Instagram Business account, we access and process:
- Direct messages (DMs) sent to your account
- Comments on your posts
- Your posts, stories, and story highlights (captions, media)
- Basic account information (username, profile details)
- Engagement metrics (likes, comments count)
1.3 Automatically Collected Information
- Usage data (features used, time spent)
- Device information (browser type, IP address)
- Log data (access times, pages viewed)
2. How We Use Your Information
We use your information to:
- Provide and maintain our Instagram automation service
- Generate AI responses to Instagram DMs and comments
- Learn your communication style from your content
- Build and maintain a knowledge base from your posts and stories
- Send automated responses on your behalf
- Provide customer support
- Process payments and billing
- Improve our service and develop new features
- Comply with legal obligations
- Protect against fraud and abuse
3. AI Processing
We use OpenAI's APIs (including GPT-4, Whisper, and GPT-4 Vision) to:
- Analyze your communication style
- Generate responses that match your voice
- Transcribe video content from stories
- Extract information from images
- Build your custom knowledge base
OpenAI processes this data according to their privacy policy. We do not use your data to train OpenAI's models.
4. Data Sharing and Disclosure
4.1 Third-Party Service Providers
We share data with trusted service providers who help us operate our service:
- OpenAI: For AI-powered response generation and analysis
- Instagram/Meta: For API integration (send/receive messages)
- Stripe: For payment processing
- Cloud Hosting Provider: For infrastructure (AWS/DigitalOcean/Vercel)
4.2 Legal Requirements
We may disclose your information if required by law or in response to valid legal requests.
4.3 Business Transfers
If we are involved in a merger, acquisition, or sale, your information may be transferred.
4.4 What We DON'T Do
- We DO NOT sell your personal information
- We DO NOT use your data for advertising
- We DO NOT share your Instagram messages with third parties (except as necessary for service operation)
5. Data Security
We implement appropriate security measures including:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of sensitive data at rest
- Secure access controls and authentication
- Regular security audits
- Compliance with industry standards
6. Data Retention
We retain your data:
- Account data: While your account is active
- Conversation history: As long as you choose to keep it
- Logs and analytics: Up to 90 days
- After account deletion: Up to 30 days for complete removal
7. Your Rights (GDPR)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Portability: Receive your data in a structured format
- Object: Object to certain processing of your data
- Withdraw Consent: Disconnect your Instagram account anytime
To exercise these rights, email us at contact@engageaiq.app or visit our Data Deletion page.
8. Instagram/Meta Platform Compliance
We comply with Instagram Platform Terms and Policies:
- We only access data necessary for service functionality
- We respect Instagram's rate limits and guidelines
- We do not use data for purposes unrelated to our service
- We provide clear data deletion mechanisms
- Users maintain control over their accounts at all times
9. Children's Privacy
Our service is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us immediately.
10. International Data Transfers
Your data may be processed in countries outside Romania/EU, including the United States (where OpenAI and cloud providers operate). We ensure appropriate safeguards are in place for such transfers.
11. Cookies and Tracking
We use essential cookies for:
- Authentication and security
- Service functionality
- Analytics (anonymous usage data)
You can control cookies through your browser settings.
12. Changes to Privacy Policy
We may update this Privacy Policy. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our service after changes constitutes acceptance.
13. Contact Us
For privacy-related questions or concerns:
14. Supervisory Authority
If you are located in the EU/EEA, you have the right to lodge a complaint with your local data protection authority regarding our processing of your personal data.
For Romania: ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal)
Back to Home