ChillCC Privacy Policy
ChillCC is a customer support and message management tool used by businesses to manage Instagram professional account comments and direct messages. This Privacy Policy explains how ChillCC collects, uses, stores, shares, and deletes information when a business user connects an Instagram account or otherwise uses the service.
This policy applies to the ChillCC app and related services. It does not describe the privacy practices of Meta, Instagram, or any third-party platform that may be connected to ChillCC.
1. Information We Process
Depending on the permissions granted by a business user, ChillCC may process the following information:
- Instagram professional account profile information, such as account identifiers, usernames, profile metadata, and connected business asset information.
- Instagram comments, replies, mentions, comment identifiers, media identifiers, timestamps, commenter profile information available through the API, and moderation status.
- Instagram direct messages, conversation identifiers, message text, message metadata, sender identifiers, timestamps, attachments or media metadata available through the API, and message status.
- Business user account information needed to operate ChillCC, such as name, email address, role, login session data, and connected account settings.
- Technical information such as server logs, device and browser information, IP address, access times, error logs, audit logs, and security event records.
- Access tokens and related authorization information needed to connect to Meta and Instagram APIs.
2. How We Use Information
ChillCC uses the information described above for the following purposes:
- To authenticate business users and connect authorized Instagram professional accounts.
- To display, organize, search, moderate, hide, delete, or reply to Instagram comments where permitted by the business user and Meta permissions.
- To display, organize, route, and reply to Instagram direct messages for customer support workflows.
- To provide inbox, customer service, assignment, notification, audit, and operational features.
- To maintain security, prevent abuse, investigate errors, enforce access controls, and protect the service.
- To comply with legal obligations, platform policies, and enforceable requests from authorities where applicable.
3. Legal and Platform Basis
ChillCC processes Meta and Instagram platform data only after a business user authorizes access and grants the required permissions. Business users are responsible for ensuring that they have the right to connect the relevant Instagram professional account and use ChillCC for customer support and account management purposes.
4. Sharing and Disclosure
ChillCC does not sell personal information. We may share information only as needed to operate, secure, and support the service, including with:
- Infrastructure, hosting, database, storage, monitoring, and security service providers acting on our behalf.
- Meta and Instagram APIs as required to provide requested features and maintain connected account authorization.
- Authorized business users and administrators within the same ChillCC workspace.
- Legal, compliance, or security recipients when required by law, platform policy, or to protect rights, safety, and service integrity.
5. Retention
ChillCC retains information only for as long as reasonably necessary to provide the service, support customer service workflows, maintain security, comply with legal obligations, resolve disputes, and enforce agreements. A business user may request deletion of connected account data at any time. Backup, audit, and security logs may be retained for a limited period before they are deleted or anonymized according to operational and legal requirements.
6. Data Deletion
Business users may request deletion of ChillCC data related to their connected Instagram account by following the instructions at Data Deletion Instructions. Users may also remove ChillCC access from their Meta or Instagram business settings. After a verified deletion request, ChillCC will delete or anonymize relevant data unless retention is required for legal, security, fraud prevention, or compliance reasons.
7. Security
ChillCC uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include access controls, encryption in transit, restricted administrative access, audit logging, and operational monitoring. No online service can guarantee absolute security.
8. International Transfers
Information may be processed and stored in countries or regions where ChillCC or its service providers operate. When information is transferred internationally, ChillCC uses reasonable safeguards appropriate to the nature of the information and applicable legal requirements.
9. Children's Privacy
ChillCC is intended for business use and is not directed to children. ChillCC does not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date.
11. Contact
For privacy questions, data access requests, or deletion requests, contact ChillCC at meiyijing998@gmail.com.