Privacy Policy

Data We Collect

From customers (the businesses using Taajx) we collect the email address and name used to sign in, workspace and plan settings, and campaign settings. When a customer connects an Instagram professional account, we receive and store its Instagram account ID, username and profile name, and an access token, which we encrypt.

From people who interact with a connected account, we process only what is needed to run that account’s campaigns: the text and ID of comments on the account’s own posts and reels, the commenter’s Instagram-scoped ID and username, direct messages sent to the account, and delivery logs of the replies we sent.

How We Use Data

We use this data only to provide the service the customer configured: to authenticate customers, match comment keywords, send the private reply or direct message the customer set up through the official Meta APIs, prevent duplicate sends, show the customer their campaign logs and analytics, troubleshoot failures, and protect the service. We do not sell personal data, use it for advertising, or share it with third parties except the infrastructure providers listed below.

Instagram And Meta Data

Taajx uses the official Instagram API and complies with the Meta Platform Terms and Developer Policies. Taajx never asks for Instagram passwords, does not scrape Instagram, and does not use browser automation. Instagram access tokens are encrypted at rest (AES-256-GCM) and are used only to perform actions the connected business account authorized. Taajx only acts on comments and messages on the connected account’s own content.

Infrastructure Providers

Taajx is hosted on Amazon Web Services (Lightsail), where our application, PostgreSQL database and Redis queue run. Data is transmitted over HTTPS. These providers process data only as needed to run the service.

Retention And Deletion

We keep customer and campaign data while the customer’s account is active. Disconnecting Instagram in Settings immediately deletes the stored access token and that account’s campaigns, logs and analytics. Customers and the people who interacted with them can request deletion of their data as described on our Data Deletion page; we complete verified requests within 30 days.

Contact

For privacy questions or requests, email support@taajx.com.