When you connect Instagram, we store your professional account ID, username and encrypted access token to publish posts you submit or schedule. We also store uploaded JPEG files, image URLs, captions, scheduled times, publication status and media IDs. Uploaded photos are available through an unguessable public URL so Instagram can retrieve them; anyone with that URL can access the photo. Uploaded files are removed within 32 days or when you disconnect and delete the Instagram data. Meta receives your selected image and caption when a publication is processed. Tokens are used only on our server and are renewed when needed for queued publications. You can disconnect Instagram and delete its stored account and publication records from the Instagram page. Posts already published on Instagram are not removed by disconnecting. Meta deauthorization and data-deletion requests also remove associated records from our active storage.
UpsellConnect (“we”, “us”) is available at upsellconnect.com and info@upsellconnect.com. We provide software that helps businesses automate customer service, reach customers, schedule appointments and collect payments through WhatsApp. Jarvy is our separate consumer AI-assistant service at jarvy.upsellconnect.com. This policy explains how we process and protect personal data.
We use data to provide AI customer service, messaging, bookings and payments; manage accounts and support; secure and improve the service; and meet legal obligations. Our GDPR legal bases include performance of a contract, consent, legitimate interests and legal obligations.
We do not sell personal data. We share only what is necessary with providers that help operate the service:
These providers receive only the data needed for their role under appropriate data-protection terms. We may also disclose data when legally required.
Data is exchanged through encrypted HTTPS/TLS connections and secured API integrations.
We use appropriate safeguards including hashed passwords, HTTPS/TLS, signed sessions, access controls and secured EU servers. No service is completely risk-free, and we continually work to protect data.
We retain data while an account is active and as needed for legal and administrative purposes, after which it is deleted or anonymised.
Some providers may process data outside the EEA. Appropriate safeguards, such as the EU Standard Contractual Clauses, are used where required.
You may request access, correction, deletion, restriction, objection or portability and withdraw consent. Email info@upsellconnect.com, use our data deletion instructions, or complain to your supervisory authority.
We use functional cookies needed for login and session management.
Our service is not intended for anyone under 16.
We may update this policy. The date above shows the latest revision.
Privacy questions may be sent to info@upsellconnect.com.