Privacy Policy

Effective date: June 11, 2026

ScaleDM ("we," "us," or "our") operates the ScaleDM ChatGPT connector and website at scaledm.io (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your choices.

We do not collect or store Instagram passwords. Authentication uses Meta's official Instagram Login (OAuth) only.

1. Who this applies to

This policy applies to visitors of scaledm.io and users who connect an Instagram professional account to ScaleDM through ChatGPT.

2. Information we collect

Depending on how you use the Service, we may process:

• Instagram account data (via official API): When you authorize ScaleDM, we receive data permitted by Instagram's API and the permissions you grant — such as account ID, username, profile information, media, insights, stories, and comments. We access this only to provide the Service.
• OAuth tokens: We store Instagram access tokens and related metadata (e.g., expiration) so the connector can call the Instagram Graph API on your behalf. Tokens are stored securely in Google Cloud Firestore.
• ChatGPT identity reference: We may store an opaque identifier linking your ChatGPT session to your connected Instagram account so the connector works across conversations.
• Technical logs: Server logs may include IP address, request timestamps, and error information for security and debugging. Logs are retained for a limited period.
• Communications: If you email us at support@scaledm.io, we retain your message and contact details to respond.

We do not knowingly collect sensitive personal data, payment card details, or Instagram login passwords through this Service.

3. How we use information

We use collected information to:

• Provide Instagram data and features you request through ChatGPT
• Maintain and secure the connector and OAuth flows
• Comply with legal obligations and enforce our Terms
• Respond to support requests and improve reliability

We do not sell your personal data.

4. Legal bases (where applicable)

We process data based on your consent (Instagram OAuth authorization), performance of the Service you request, and our legitimate interests in operating a secure connector. Where required by law, we rely on applicable legal bases under local privacy regulations.

5. Third-party services

The Service integrates with third parties that have their own privacy policies:

• Meta / Instagram: OAuth and Graph API data handling
• OpenAI / ChatGPT: Platform through which you access ScaleDM
• Google Cloud: Hosting (Cloud Run, Firestore, Firebase Hosting)

We are not responsible for third-party privacy practices. Review their policies before using their services.

6. Data retention

We retain Instagram OAuth tokens and linked account data while your connection is active and as needed to operate the Service. You may request deletion at any time (see Section 8). Technical logs are retained for a limited operational period and then deleted or anonymized.

7. Security

We use industry-standard measures including HTTPS, encrypted storage in Google Cloud, and access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Your rights and data deletion

You may:

• Revoke ScaleDM's access via Instagram account settings at any time
• Request access, correction, or deletion of data we hold about you
• Withdraw consent where processing is consent-based

To exercise these rights, email support@scaledm.io with the subject "Privacy Request." We will respond within a reasonable timeframe as required by applicable law.

Meta data deletion: If you connected via Instagram Login, you may also use Meta's data deletion flows as described in the Meta App Dashboard for this application.

9. Children's privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect data from children.

10. International transfers

Data may be processed in the United States, Singapore, and other countries where our service providers operate. We take steps to protect data in line with this policy and applicable law.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective date" at the top will change when we do. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

Questions about this Privacy Policy: support@scaledm.io

This Privacy Policy is provided for informational purposes and to meet platform requirements. It is not legal advice. For jurisdiction-specific obligations, consult qualified counsel.