Privacy Policy

1. Information We Collect

Account Information: When you register, we collect your name, email address, and password (stored as a secure hash).

Instagram Account Data: When you connect your Instagram Business account via Meta's OAuth, we collect and store your Instagram username, Instagram user ID, and a long-lived access token provided by Meta. This token is used solely to fetch your posts and reply to comments on your behalf.

Automation Data: We store the comment rules you create — including post IDs, trigger keywords, and reply messages — in order to operate the automation service.

Usage Data: We may collect standard server logs including IP address, browser type, pages visited, and timestamps for security and debugging purposes.

2. How We Use Your Information

• To provide, operate, and maintain the JustCreator platform
• To automatically reply to Instagram comments based on your configured rules
• To authenticate your account and maintain session security
• To communicate with you about your account and service updates
• To diagnose technical problems and improve the platform

3. Instagram and Meta Platform Data

JustCreator uses the Meta Instagram Graph API. By connecting your Instagram account, you authorize us to:

• Read your Instagram media (posts, reels) to allow rule configuration
• Receive webhook notifications when comments are posted on your media
• Post replies to comments on your behalf using your access token

We do not sell, share, or transfer your Instagram data to any third party. Your access token is stored securely and is only used to perform actions you have explicitly configured. You can revoke access at any time from your Instagram Settings → Apps and Websites.

We comply with the Meta Platform Terms and the Meta Developer Policies.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data, Instagram credentials, and automation rules within 30 days. Server logs may be retained for up to 90 days for security purposes.

5. Data Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords (bcrypt), and secure database access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Third-Party Services

We use trusted third-party services solely to operate and improve the JustCreator platform. These services process data only as necessary to deliver our service and are bound by their own privacy policies. The primary third-party integration we use is the Meta Instagram Graph API — for connecting your Instagram account and enabling comment automation. We do not share your personal data with any other third parties for advertising or marketing purposes.

7. Your Rights

You have the right to access, correct, or delete your personal data at any time. To request data deletion, contact us at info@justcreator.co. You may also disconnect your Instagram account at any time from within the platform.

8. Children's Privacy

JustCreator is not directed to individuals under the age of 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date at the top of this page. Continued use of the service after changes constitutes your acceptance of the updated policy.