Privacy Policy

1. Who we are

Framework ("we", "us", "our") provides an AI-powered Instagram DM automation service for small businesses. This policy explains how we handle your data when you use our service at frameworkapps.com and app.frameworkapps.com.

2. What we collect

• ·Instagram account information (name, profile picture, business ID) via Meta OAuth
• ·Page access tokens required to read and send messages on your behalf
• ·Direct message content from your Instagram inbox
• ·Sender identifiers for your customers' messages
• ·Account credentials, invite codes, and preferences
• ·IP addresses, browser info, usage logs, and session data

3. How we use it

• ·Operate the DM automation service (reading messages, generating AI replies, sending responses)
• ·Display your conversations and message history in the dashboard
• ·Manage your account, preferences, and agent configuration
• ·Improve the service and troubleshoot issues
• ·Comply with legal obligations

4. Data storage & security

Your data is stored in a PostgreSQL database. Sensitive fields (including access tokens, message content, and sender identifiers) are encrypted at rest using AES-256-GCM. All connections use HTTPS/TLS. API endpoints are protected by session-based authentication.

Message history is automatically deleted after 90 days. We cannot guarantee absolute security, but we apply industry-standard protections.

5. Data sharing

We do not sell, trade, or rent your personal information. We may share data only with Meta/Facebook as required to use their APIs, with hosting and infrastructure providers necessary to operate the service, or when required by law.

6. Your rights

• ·Access: request a copy of all data we hold about you
• ·Delete: remove your account via the dashboard or by contacting us. All data is permanently deleted immediately
• ·Modify: update your preferences and settings at any time through the dashboard
• ·Revoke: remove our app access at any time in Facebook Settings → Business Integrations

7. Third-party services

Our service integrates with Meta's Facebook and Instagram APIs. Your use is also governed by Meta's Privacy Policy and Terms of Service.

8. Data retention

We retain account data while your account is active. Message history is deleted after 90 days. When you delete your account, all data is permanently deleted immediately, except where retention is required by law.

9. Children

Our service is not intended for users under 13. We do not knowingly collect data from children under 13.

10. Changes

We may update this policy from time to time. Changes are posted on this page with an updated date. Continued use of the service constitutes acceptance.

11. Contact

Questions about this policy? Contact us at [email protected].