Privacy Policy
Effective Date: [EFFECTIVE_DATE]
1. Who We Are
Cnct ("we," "us," "our") is operated by [COMPANY_LEGAL_NAME]. If you have questions about this Privacy Policy or your data, contact us at audubonaudioshop@gmail.com or by mail at [MAILING_ADDRESS].
2. What We Collect
We collect three broad categories of information:
a) Account data you give us
- Your email address
- Your password — stored only as a one-way cryptographic hash, never in plain text
- Your name, if you provide it
b) Instagram data received via Meta's API with your authorization
- Your connected Instagram account ID and username
- OAuth access tokens used to act on your account (never your Instagram password)
- Comments on your posts, including commenter usernames and IDs, that your automations process
- Message delivery logs (whether a reply or DM succeeded or failed, and when)
c) Billing data
Payments are handled entirely by Lemon Squeezy, our payment processor and Merchant of Record. We never see or store your card number — we store only the customer and subscription identifiers Lemon Squeezy returns to us.
We also collect basic server logs (IP address, browser/user agent) for security and troubleshooting purposes.
3. How We Use It
We use the information above to:
- Operate the comment-reply and DM automations you configure
- Show you your activity and response logs
- Enforce the limits of your plan (Free, Pro, Agency)
- Process billing through Lemon Squeezy
- Maintain the security of the service
We do not sell your personal data, and we do not use it for advertising.
4. Meta / Instagram Platform Data
Data we obtain through the Instagram API — including your account information, comments, and message logs — is used solely to provide the automation features you set up inside Cnct. This data is handled in accordance with Meta Platform Terms and Developer Policies.
Disconnecting your Instagram account inside Cnct deletes your stored access tokens. You can also revoke Cnct's access at any time directly from Instagram's own account settings (Apps and Websites).
5. Sharing
We share data only with the third parties needed to run the service, or when legally required:
- Meta Platforms — to operate the Instagram automation features
- Lemon Squeezy — our payment processor and Merchant of Record, to process payments
- Hostinger — our hosting and database provider
We do not share your data with third-party marketers.
6. Retention
- Account data is retained while your account is active.
- Response logs are retained while the related Instagram account remains connected.
- Deletion follows the timelines described in our Data Deletion page (up to 30 days).
7. Your Choices & Deletion
- Disconnect any Instagram account at any time from inside the app.
- Request full account deletion by emailing audubonaudioshop@gmail.com.
- See our full Data Deletion Instructions for step-by-step options.
8. Cookies / Local Storage
We use browser local storage to keep you logged in (a JSON Web Token). We do not use advertising cookies or cross-site tracking technologies.
9. Security
We use HTTPS, hash all passwords, and restrict access to Instagram tokens. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. US State Privacy Rights
Depending on where you live, you may have rights under state privacy laws, including the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code §1798.100 et seq.), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Utah Consumer Privacy Act (UCPA), the Texas Data Privacy and Security Act (TDPSA), the Oregon Consumer Privacy Act (OCPA), and the Montana Consumer Data Privacy Act (MTCDPA).
These rights generally include the ability to:
- Know what personal data we hold about you and access it
- Correct inaccurate personal data
- Delete your personal data
- Obtain a portable copy of your data
- Opt out of the sale or sharing of personal data, or its use for targeted advertising
- Not be discriminated against for exercising these rights
We do not sell or share personal data for targeted advertising. Some of these laws only apply to businesses above certain size thresholds, but we honor these rights for all users regardless of where you live.
To exercise any of these rights, email audubonaudioshop@gmail.com. We will respond within 45 days.
Categories Collected (Last 12 Months) — California Disclosure
| Category | Purpose |
|---|---|
| Identifiers (email, Instagram username/ID) | Account creation and operating your automations |
| Commercial information (subscription plan, billing identifiers) | Billing and plan enforcement |
| Internet activity (server logs, app usage) | Security, troubleshooting, and service operation |
11. Children
Cnct is intended for business and creator users 18 and older. We do not knowingly collect personal data from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us data, contact us at audubonaudioshop@gmail.com and we will remove it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version here with a new effective date.
Effective date history: [EFFECTIVE_DATE] — initial version.
This Privacy Policy is directed to users in the United States. If you are contacting us from the EU or UK, please reach out at audubonaudioshop@gmail.com with any inquiries.