Privacy Policy
This Privacy Policy explains how InstaDM (operated at https://nextzshop.online, referred to as "we", "us", or "our") collects, uses, stores, processes, and protects your information when you connect and automate your Instagram Creator or Business account.
Zero Password Storing
We never see or store your Instagram password. Authentication is completed securely via official Meta OAuth.
Encrypted Meta Tokens
All Instagram User Access Tokens are stored server-side with encryption at rest and are never exposed to browsers.
Instant Data Deletion
Disconnecting your account immediately wipes all tokens and automations. Deletion requests are processed within 48h.
Information We Collect
When you use InstaDM at https://nextzshop.online, we collect only the minimal data necessary to provide our automated direct messaging and comment reply services:
A. Account & Profile Information
- Your InstaDM account registration details (email address, name).
- Instagram Business/Creator Account details retrieved via Meta Graph API: Instagram Scoped ID (
id), username (username), profile name, profile picture URL, and follower count. - Metadata for posts and reels that you choose to automate (e.g. Media ID, permalink, caption snippet).
B. Direct Messages and Comments Interaction Data
- Comment Activity: Comment ID, comment text, timestamp, post ID, and the commenter's Instagram-scoped ID (IGSID) and public handle.
- Direct Messages: Incoming message text received via webhook, message ID, sender IGSID, and timestamp.
- Automation Delivery Status: Outgoing automated reply text, destination link clicks, and API delivery success/failure logs.
C. Technical & Diagnostic Information
- IP addresses, browser type, device information, and error logs collected strictly for security auditing, fraud prevention, and uptime diagnostics.
How We Use Instagram Account Data & Access Tokens
We connect to Instagram using the official Meta Instagram Business Login flow. We adhere strictly to the Meta Platform Terms and Developer Policies:
- Meta OAuth Access Tokens: When you connect your account, Meta issues an authorization code that our secure server exchanges for an encrypted access token. This token is stored strictly in our protected database and is used solely to execute the automations you explicitly create.
- Scope Limitation: We only request permissions necessary for core app functionality:instagram_business_basicinstagram_business_manage_messagesinstagram_business_manage_comments
- No Unauthorized Actions: We will NEVER use your access token to follow or unfollow accounts, like random media, read private personal non-business chats, or post unapproved content.
- No Selling of Data: We NEVER sell, rent, lease, or broker your personal or Instagram data to third parties, advertising networks, or data brokers.
How DMs and Comments Data Are Processed
InstaDM functions as an automated marketing workflow assistant for creators and brands:
Real-time Webhook Ingestion
When an Instagram user comments on your post or sends a DM, Meta notifies our secure webhook endpoint (https://nextzshop.online/api/webhook/instagram).
Keyword Filtering & Trigger Execution
Our system checks whether the comment or message contains your configured trigger keywords (e.g. "LINK", "PRICE", "SHOP"). If a match is found, our server sends your pre-composed DM or public comment reply back through Meta's official Graph API.
Ephemeral Processing
Message payloads are processed ephemerally using background queues. We only persist basic delivery metrics and trigger activity logs to show you conversion analytics inside your dashboard.
Data Storage and Security
We employ enterprise-grade security standards to safeguard your account:
- Encryption in Transit: All data transmitted between your browser, our servers, and Meta's Graph API is encrypted using TLS 1.3 (HTTPS).
- Encryption at Rest: Access tokens and sensitive credentials are securely stored in encrypted database clusters (PostgreSQL).
- Tenant Isolation: Workspaces are partitioned by user ID so that no unauthorized user or organization can access another creator's account details.
- Least Privilege Architecture: Server endpoints communicate with Meta strictly via backend services; credentials and secrets are never embedded in client-side code.
Data Deletion Instructions (User Data Deletion)
In compliance with Meta Platform Policies and General Data Protection Regulations (GDPR), you have the right to request deletion of all personal data, Instagram profile records, automations, and tokens stored by InstaDM.
Option 1: Instant In-App Disconnection
Log in to your dashboard at https://nextzshop.online/dashboard/profile, locate your Instagram account, and click Disconnect Account. This immediately revokes and purges your access token from our database and terminates all automation jobs.
Option 2: Revoke Access via Instagram Settings
In your Instagram app, go to Settings > Apps and Websites > find InstaDM > tap Remove. Meta will immediately invalidate your token and notify our server.
Option 3: Complete Account Purge via Email
Send an email from your registered address to support@nextzshop.online with the subject line "Data Deletion Request" and include your Instagram username. Our technical team will permanently delete your entire user profile, database records, and logs within 48 hours and confirm via email.
Third-Party Services
To deliver our service reliably, we integrate with trusted third-party cloud vendors:
Instagram Graph API, Instagram Login, and webhook event delivery.
Secure encrypted database storage for user profiles and automation rules.
Resilient background event orchestration for comment and DM handling.
PCI-DSS Level 1 compliant billing and subscription payment processing.
Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection and Support team:
Platform Name: InstaDM
Service Domain: https://nextzshop.online
Support & Privacy Email: support@nextzshop.online
Operator: InstaDM Labs / nextzshop.online
Response Time: Within 24–48 hours on business days
© 2026 InstaDM (nextzshop.online). All rights reserved.