Privacy Policy
Last updated: September 30, 2026
This policy explains what information InstaMaster collects when you use our website (instamasterapp.com) and our application (app.instamasterapp.com), why we collect it, who we share it with, and how you can have it deleted. InstaMaster is the data controller for the information described here. You can reach us at any time at support@instamasterapp.com.
1. Information we collect
Account information. When you sign in with Google, we receive your name, email address and Google account identifier. We do not receive your Google password. If a workspace owner creates a team login for you, we store your username and a securely hashed password (never the password itself).
Connected Instagram accounts. When you connect an Instagram account, we store its username and the credentials needed to act on your behalf:
- For the official Instagram API: your Instagram user ID and access token, and optionally your Meta app ID and app secret.
- For the optional unofficial connection: your Instagram password, an optional proxy address, and the session and device files Instagram issues after login.
These credentials are encrypted at rest and are used only to perform the actions you configure.
Content you provide. Videos you upload, captions, hashtags, first comments, posting schedules, and automation settings such as reply templates, direct message templates, keywords and target hashtags.
Data we retrieve from Instagram for you. Follower counts and post insights (reach, likes, comments and similar metrics) for your connected accounts, used to show your reports and growth history.
Usage and technical data. A record of when posts are published (used to apply plan limits), automation activity counters, and standard server logs that include IP addresses and request information, used for security and troubleshooting.
2. How we use information
- To sign you in and keep your workspace separate from every other customer.
- To publish, schedule and manage content on the Instagram accounts you connect, and to run the automations you switch on.
- To show analytics about your own accounts.
- To apply your plan limits and, when paid plans are purchased, to manage your subscription.
- To secure the service, prevent abuse and respond to your support requests.
We do not sell your personal information, we do not use it for advertising, and we do not use your content to train AI models.
3. Who we share it with
We share information only with the service providers needed to run InstaMaster:
- Hetzner Online GmbH (Germany) hosts our servers and stores the data described above.
- Google provides sign-in. Our application also loads fonts from Google Fonts, which receives your IP address when the page loads.
- Meta Platforms (Instagram) receives the content and actions you instruct us to send to your Instagram accounts.
- jsDelivr delivers an icon library used by the application, and receives your IP address when the page loads.
- A payment processor will handle payments once paid checkout is available. We will not store your full card details.
We may also disclose information if required by law, or to protect the rights, property or safety of InstaMaster, our customers or others.
4. Cookies
The application uses a single essential session cookie to keep you signed in. It is marked secure and HTTP-only. It is not used for tracking. Your browser may also store interface preferences, such as the last page you viewed or light or dark mode. Our marketing website does not use analytics or advertising cookies.
5. Retention and deletion
We keep your information for as long as your workspace is active. When you close your account from Settings → Close my account, or when we delete it at your request, we immediately and permanently delete your connected Instagram accounts and their credentials, queued videos, analytics history, automation settings, team logins and plan records. Copies in our access-restricted daily backups are removed within 14 days. See Data Deletion for step-by-step instructions.
6. Security
All traffic is encrypted with HTTPS. Instagram credentials are encrypted at rest. Passwords are hashed. Each customer's data is isolated from other customers. Access to our servers is restricted. No system is perfectly secure, but we work to protect your information and will notify you of a breach that affects you where the law requires.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict its processing. You can delete your data yourself at any time from Settings. For any other request, email support@instamasterapp.com. We will respond within 30 days. You may also complain to your local data protection authority.
8. International transfers
Our servers are located in Germany. If you use InstaMaster from another country, your information will be transferred to and processed in Germany and by the providers listed above, some of which operate worldwide.
9. Children
InstaMaster is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children.
10. Changes
If we make material changes to this policy, we will update the date above and notify active customers by email or in the application before the changes take effect.
11. Contact
Questions about this policy or your data: support@instamasterapp.com.