Your information and choices

Privacy Policy

Effective November 5, 2026 · Service: Chatmate at meta.chatmate.ir

This policy describes how Chatmate handles information when a workspace uses the service to connect an Instagram Professional account, review comments and direct messages, and manage team replies. Chatmate is not affiliated with or endorsed by Meta or Instagram.

Information we handle

• Workspace account information: email address, workspace name, membership and invitation details, and a password hash. We do not store workspace passwords in readable form.
• Instagram connection information: Instagram account ID and username, the authorization token needed to provide the connection, and its expiration and subscription status. Tokens are encrypted in the service database.
• Inbox and profile information: messages, comments, timestamps, sender IDs and usernames, media or shared-content URLs returned by Meta, public media URLs a workspace member submits for an outgoing Instagram message, and profile fields Meta makes available for a conversation, such as username, name, profile picture, follower count, or follow relationship.
• Temporary message uploads: media files a workspace member chooses to attach to a DM. Files are encrypted on the hosting server and made available at an unguessable temporary URL so Meta can fetch them for delivery. They expire and are automatically deleted within 48 hours.
• Workspace content: saved replies, automation rules and outcomes, conversation assignments, tags, private team notes, moderation state, and message delivery records.
• Service operation information: session and security data needed to authenticate users, protect the service, and troubleshoot requests.

Instagram information is obtained through Meta’s authorization and API after an account owner connects an eligible Professional account. Chatmate does not ask for or store an Instagram password. Meta controls which account, conversation, message, and profile fields are available to the API.

How we use information

We use this information to authenticate workspace members; connect the Instagram account the member authorized; display and sync available comments and conversations; send replies and moderation actions requested by users; run rules that workspace owners explicitly enable; and maintain workspace assignments, notes, tags, saved replies, and activity history.

Workspace members with access to the same workspace may see its connected accounts, inbox information, automations, and team context. Private notes and tags are internal to that workspace and are not sent as Instagram messages.

When information is shared

• Meta: Chatmate communicates with Meta to authorize an account, retrieve the data the account owner requested, subscribe to supported events, and send the replies, media URLs, or moderation changes a workspace member initiates. When a member sends a media URL or device upload, Meta fetches the media from that URL to deliver it. Meta’s own terms and privacy policy also apply.
• Infrastructure providers: The service stores data on its hosting server. Meta API requests from that server are routed through the HTTPS network relay at keswl.ir so the server can reach Meta. These providers process information needed to operate the service and its network connection.
• Workspace members: Information is available to members the workspace owner invited, as described above.

Chatmate does not sell Instagram inbox data or use it to serve advertising.

Security and retention

Connections use HTTPS. Instagram access tokens and stored inbox payloads, profile details, and private notes are encrypted in the application database. Temporary DM uploads are encrypted on disk and automatically removed within 48 hours. Workspace passwords are stored as salted password hashes. No online service can guarantee absolute security, so users should invite only trusted workspace members and protect their email account and Chatmate password.

We keep workspace and Instagram information while needed to provide the service and until a deletion request is completed. Disconnecting an Instagram account stops its active connection and removes it from the workspace’s connected-account list. If you also want its stored inbox and profile data removed, submit a deletion request using the instructions on our Data Deletion page.

Your choices and deletion requests

You can disconnect an Instagram account from the Channels page. You can request deletion of workspace information or stored information associated with an Instagram account by emailing saeed.sql02@gmail.com. Include the workspace name and the email address on the Chatmate account; for Instagram data, include the connected account username. Do not email passwords, access tokens, or app secrets. We may ask for enough information to verify that you control the workspace before acting on a request.

Contact

For questions about this policy or a data request, contact saeed.sql02@gmail.com.