Privacy Policy

Last updated: February 2026

1. Introduction

Welcome to GhostAgent ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and shield your information when you use our automated Instagram DM service.

2. Integration with Meta Platform Technologies

Our service integrates directly with Meta Platform Technologies (specifically Instagram and Facebook Graph APIs) to read and reply to direct messages on your behalf. By using GhostAgent, you acknowledge that your data is processed in accordance with Meta's Platform Terms and Developer Policies. We only access the data necessary to perform the automated response function.

3. Data Storage and Processing

We use industry-standard providers to facilitate our service:

  • •Supabase: We use Supabase securely to store user account information, authentication data, and activity logs.
  • •AI Processing: Incoming messages are processed by advanced AI models (such as OpenAI or Groq) to generate relevant responses. These third-party AI providers do not use your data for training their models without your explicit consent.

4. Data Collection

We collect the following types of information:

  • •Account Information: Your email address and authentication tokens required to link your Instagram account.
  • •Communication Data: Logs of incoming messages and outgoing AI-generated replies for the purpose of maintaining conversation history and improving service quality.

6. Contact Us

If you have questions about this Privacy Policy, please contact us at support@ghostagent.qzz.io.

5. Data Deletion Instructions

You have the right to request the complete deletion of your personal data stored on our servers at any time. To exercise this right:

  1. 1.Send an email to support@ghostagent.qzz.io with the subject line "Data Deletion Request".
  2. 2.Include your registered email address and your connected Instagram handle.
  3. 3.We will process your request within 30 days and permanently delete your account, authentication tokens, and all associated chat logs from our database.