Privacy Policy

Last updated: May 18, 2026

Atlas ("we", "our", or "us") is a DM automation platform for Instagram Business creators. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services, including our integration with Meta's Instagram Business API.

1. Information We Collect

When you connect your Instagram Business account to Atlas, we collect and process:

• Your Instagram Business Account ID and username
• Instagram long-lived access tokens (stored encrypted using AES-256)
• Direct messages received through your connected Instagram account
• Comments on your Instagram posts (for comment-triggered automations)
• Follower information (username and IGSID) of users who interact with your account
• Message content sent and received through your account via Atlas automations
• Conversation history generated through the Atlas pipeline

We also collect standard account information when you register: name, email address, and password (hashed).

2. How We Use Your Information

• To deliver automated DM responses to your Instagram followers on your behalf
• To trigger DM flows when followers comment specific keywords on your posts
• To generate AI-powered responses using your configured persona and scripts
• To store conversation history so our AI can maintain context across messages
• To display analytics and conversation management tools in your Atlas dashboard
• To send you platform notifications and account communications

3. Meta / Instagram API Data

Atlas uses Meta's Instagram Business API (Instagram Business Login) to access your Instagram account. By connecting your account, you authorize Atlas to:

• Read and send direct messages on your behalf (instagram_business_manage_messages)
• Read comments on your posts (instagram_business_manage_comments)
• Read your basic profile information (instagram_business_basic)

We do not sell, share, or transfer your Instagram data to third parties, except to the AI providers (Anthropic, OpenAI) used to generate responses. Data shared with AI providers is limited to conversation context and is not used for model training.

Data obtained through Meta APIs is used solely to provide the Atlas service and is not used for advertising or profiling.

4. Data Storage and Security

• Instagram access tokens are encrypted at rest using Fernet (AES-128-CBC) derived from our application secret key
• All data is stored on Railway infrastructure with TLS encryption in transit
• Database access is restricted to application-level credentials
• We do not store raw Instagram message content beyond what is necessary to maintain conversation context

5. Data Retention

We retain your data for as long as your Atlas account is active. Conversation history is retained to maintain AI context quality. When you delete your account or disconnect your Instagram account, your data is deleted within 30 days, except where retention is required by law.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (see our Data Deletion page)
• Disconnect your Instagram account at any time from Atlas Settings
• Export your conversation data upon request

7. Third-Party Services

Atlas integrates with the following third-party services:

• Meta (Instagram) — messaging and comment API access
• Anthropic / OpenAI — AI response generation
• Cloudinary — media file storage for voice notes
• Railway — cloud infrastructure and hosting

8. Children's Privacy

Atlas is intended for business users and is not directed at children under 13. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of Atlas after changes constitutes acceptance of the updated policy.