This Privacy Policy explains how Directino ("we", "us", or "our") collects, uses, stores, and shares information when you use our platform to manage and automate Instagram pages. We build on the official APIs provided by Meta (e.g., Instagram Graph API) and comply with Meta’s Platform Policies. We never sell personal data and we do not use your data for purposes unrelated to providing and improving our services.
Who we are
Directino is a platform designed to help creators and businesses manage their Instagram presence more efficiently by offering tools such as content planning, insights aggregation, and communication workflow automation via Meta’s official APIs.
Information we collect
We only collect information necessary to provide our services and only with your explicit permission. This may include:
- Account and profile information: Basic Instagram Business/Creator account details and connected Page info available via the Instagram Graph API, such as account ID, username, profile name, profile picture URL.
- Content and insights: Media IDs, captions, comments, message metadata, and aggregated analytics/insights provided by Meta’s APIs (e.g., impressions, reach, engagement metrics).
- Contact information: Email address or other contact details that you provide to us for account management and communications.
- Technical information: Device, browser, log data, and IP address collected to maintain security, prevent abuse, and improve performance.
- Access tokens: OAuth tokens issued by Meta that allow our platform to perform actions you authorize. We do not collect your Instagram password.
How we use your information
- To provide, maintain, and improve our services and features.
- To perform only the actions you explicitly authorize via permissions granted to our app on Meta platforms.
- To display analytics and insights relevant to your Instagram presence.
- To communicate with you about updates, security notices, and support.
- To enforce our Terms of Service and prevent misuse or abuse.
Our use of Meta's APIs
We integrate with Meta’s official APIs (including the Instagram Graph API). Our access is limited to scopes that you explicitly grant. We use tokens and endpoints in accordance with Meta’s policies, and we do not request or retain data beyond what is necessary to provide the services you choose to use.
Data minimization and retention
- We store only the minimum data required to deliver the services.
- Access tokens are stored securely and are rotated/expired per Meta’s policies. Invalid or revoked tokens are removed.
- Operational data (e.g., logs) are retained only as long as needed for security, troubleshooting, and compliance, then securely deleted or anonymized.
- You may request deletion of your account data at any time (see “Your rights and choices”).
Security measures
We implement appropriate technical and organizational measures designed to protect your information, including encryption in transit (HTTPS/TLS), strict access controls, and secure secret management. While no system can be 100% secure, we continuously work to protect your information against unauthorized access, alteration, disclosure, or destruction.
Data sharing and processors
We do not sell your personal information. We may share limited data with trusted service providers who process data on our behalf (e.g., hosting, analytics, error monitoring) under binding contracts and only for the purposes described in this policy. We may also disclose information if required by law, regulation, or a valid legal process.
International transfers
Your information may be processed and stored in countries other than your country of residence. Where applicable, we implement safeguards to ensure your data is protected in accordance with relevant laws.
Your rights and choices
- Access and correction: You can request a copy of your data or ask us to correct inaccurate information.
- Deletion: You can request deletion of your account data. Upon verification, we will delete the data we hold, except where retention is required by law.
- Revoke permissions: You can revoke our access to your Instagram account at any time via your Facebook/Instagram account settings.
- Opt-out of communications: You can opt out of non-essential communications by following the unsubscribe instructions or contacting us.
How to request data deletion
Email privacy@directino.com with the subject “Instagram Data Deletion Request”. Include your Instagram Business/Creator account ID or username associated with Directino. We will verify your request and delete the applicable data in accordance with our obligations and applicable law.
Children’s privacy
Our services are intended for use by businesses and individuals aged 16+ and are not directed to children. We do not knowingly collect personal information from children.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date. If changes are material, we may provide additional notice as required by law.
Contact us
If you have questions about this Privacy Policy or our data practices, please contact us at:
- Email: privacy@directino.com
- Support: support@directino.com
Instagram and Meta are trademarks of Meta Platforms, Inc. This policy applies to Directino and not to third-party platforms.