This Privacy Policy describes how Craveful ("we", "us", "our") collects, uses,
and shares information when you use our Instagram Direct Message (DM) application
"Craveful" (the "App"). The App connects with Instagram to help you send and manage
direct messages. By using the App you agree to the collection and use of information in accordance with
this policy.
1. Information We Collect
We collect information that you provide directly and information obtained via Instagram's APIs when you
authorize the App.
Information you provide
Account information: email address, name, and contact details you submit during signup or support
requests.
Preferences & settings: options you select within the App (notification preferences, message
templates, etc.).
Information obtained from Instagram
Basic profile information from your Instagram account (username, profile picture, user id) when you
connect the App.
Direct message content: messages that you send through the App and any content the App requires to
provide its features (text, images, media) — only if you choose to send or store messages via the
App.
Followers/following lists and metadata necessary to show or target recipients, if your chosen
features require it.
2. How We Use Your Information
Provide, operate, and maintain the App features (sending/receiving DMs, scheduling, templates,
analytics).
Authenticate with Instagram and manage your connection via OAuth.
Improve our App by analysing usage, diagnosing issues, and testing features.
Communicate with you about updates, support requests, or questions.
Comply with legal obligations and enforce our Terms of Service.
3. Legal Basis for Processing (if you are in the EEA)
Where applicable, we process personal data based on:
Your consent (e.g., when you authorize connecting your Instagram account).
Performance of the contract (providing the App's services you requested).
Our legitimate interests (improving and securing the App), balanced against your rights.
4. Sharing & Disclosure
We will not sell your personal information. We may share information in the following limited
circumstances:
Service providers: third-party vendors who perform services on our behalf (hosting,
analytics, payments, email delivery). They only receive the data necessary to perform their tasks.
Instagram: We share data with Instagram as required by their Platform Policies and
API usage to perform operations you request (sending messages, reading DMs when authorized). Your
use of the App is also subject to Instagram's privacy practices.
Legal requests: When required by law, to respond to legal process, or to protect
our rights, users, or the public.
Business transfers: If we are involved in a merger, acquisition, or sale of assets,
user data may be transferred as part of that transaction.
5. Third‑Party Services & Links
The App may use third‑party services (for analytics, error reporting, or email). These services have
their own privacy policies and we recommend reviewing them. The App may include links to third‑party
websites; we are not responsible for their privacy practices.
6. Data Retention
We retain personal data as long as necessary to provide the App and comply with legal obligations. You
can request deletion of your account and associated data by contacting us (see "Contact" below). Please
note backups and logs may retain data for a limited period.
7. Security
We use reasonable administrative, technical, and physical measures to protect personal information.
However, no system is completely secure — we cannot guarantee absolute security.
8. Your Rights
Depending on where you live, you may have the right to:
Access the personal information we hold about you.
Request correction or deletion of your personal information.
Object to or restrict processing of your data.
Receive a copy of your data in a structured, commonly used format (data portability).
To exercise these rights, contact us using the information below. We may need to verify your identity
before fulfilling certain requests.
9. Children
The App is not intended for children under the age of 13 (or higher age where required by local law). We
do not knowingly collect personal information from children. If you believe a child under the applicable
age provided us with personal information, contact us to request deletion.
10. Cookies & Local Storage
We use cookies and local storage to maintain your session, store preferences, and improve the App. You
can control cookies via your browser or device settings, but disabling some cookies may affect
functionality.
11. International Transfers
Your data may be transferred to and processed in countries other than your country of residence. We will
take appropriate steps to ensure adequate protection is applied (e.g., standard contractual clauses)
where required.
12. Changes to This Privacy Policy
We may update this policy from time to time. When we do, we will post the updated policy with a new
"Effective date". It is your responsibility to review this policy periodically.