Privacy Policy
InstaForge is a managed Instagram service: we plan, publish, and handle activity on Instagram accounts our clients hire us to run. This policy describes what data that work involves, what we do with it, and what we never do. It is written to be read, not skimmed past.
Connected Instagram accounts
If you hire us to manage your Instagram, you connect your account yourself through Meta's own authorisation screen. We never ask for, receive, or store your Instagram password. You approve a specific list of permissions, and you can withdraw that approval at any time from your own Instagram settings without asking us.
What we receive:
- An access token. A revocable key that lets us act on your account within the permissions you approved. It is encrypted at rest and is never shown to you, to other clients, or to anyone outside the staff working on your account.
- Your account profile and media. Your professional account's public details and the posts we publish or manage for you.
- Comments and mentions on your posts, so we can answer them on your behalf.
- Direct messages sent to your account, where you have asked us to handle your inbox. We read and reply to these as your representative.
- Insights and analytics for your own account and posts, to report on the work.
What we do with it: only the work you hired us to do — planning, publishing, answering your comments and messages, and reporting. Your Instagram data is never sold, never used to advertise to you or anyone else, never used to train an AI model, and never shown to another client.
What we never do: we do not ask for your password, we do not log into your account as you, we do not follow, unfollow, or like on your behalf, and we do not send unsolicited messages to people who have not contacted you first.
How long we keep it: for as long as you are a client. When you leave or disconnect the account, your access token is revoked and destroyed, and the Instagram content and message history we held for you is deleted within 30 days, except anything tax or accounting law requires us to retain. See Data deletion for how to ask for that sooner.
Contact and signup information
If you contact us or sign up, we hold what you give us — your name, email, the accounts you asked us to manage, and our correspondence — for as long as you are a client or in conversation with us. We use it to do the work and to reply to you. We do not sell it or share it with advertisers.
Payments
Card and payment data is handled by our payment processor, not by us. We never see or store your card number.
Your choices
- Withdraw Instagram access at any time, from your own Instagram settings — no notice to us required.
- Ask for your data, or ask for it to be deleted, at any time: Data deletion explains exactly how and what happens.