Privacy Policy & Meta API Disclosures
Platform: IGENT by CGS 360 • Entity: CGS 360 Technologies • Effective Date: September 10, 2026 • Direct Compliance URL: https://igent.cgs360.in/privacy
As creators, developers, and social media managers ourselves, we know how much dedication, creativity, and audience trust it takes to build a thriving community on Instagram. We built IGENT to give creators intelligent superpowers—publishing reels, triggering instant DM lead funnels, replying to comments 24/7, and resolving customer inquiries—without ever putting your account safety or your audience’s privacy at risk.
1. Who We Are & Scope of this Policy
This Privacy Policy applies to the software platform IGENT, located at https://igent.cgs360.in, operated by CGS 360 Technologies ("CGS 360", "we", "us", or "our").
IGENT is an authorized business intelligence, direct message automation, comment moderation, and content management platform built specifically for Instagram Professional (Creator and Business) accounts. Our platform integrates strictly with Meta Platforms, Inc. via the official Instagram Graph API and Messenger API for Instagram.
2. Meta Permissions & Features Requested and Utilized
In strict compliance with Meta Developer Policies Section 4, we request only the minimal permissions required to execute creator-initiated automation features.
Account Identity & Media
"The instagram_business_basic allows your app to read an Instagram Business account profile's info and media."
- Instagram Business / Professional Account ID & Username
- Profile picture URL and public profile display handle
- Follower count, following count, and media count
- Basic metadata for published media (captions, media type, timestamps, permalinks)
Enables creators to authenticate their Instagram Professional account, verify ownership, display live account statistics in the centralized header switcher, and sync active posts with the IGENT dashboard.
Feed & Reel Publishing
"The instagram_business_content_publish permission allows an app to create organic feed photo and video posts on behalf of a business user."
- Creator-uploaded media files (high-definition images, carousel items, video reels)
- Captions, hashtags, user mentions, and cover photo selections
- Scheduled publication timestamps chosen by the creator
Allows creators to schedule and automatically publish organic feed posts, carousels, and Instagram Reels directly to their Instagram Business account at optimal audience engagement times.
Comment Moderation & Auto-Replies
"The instagram_business_manage_comments permission allows an app to access comments on an Instagram professional account, as well as public posts and Instagram Stories where that account is tagged or mentioned in comments."
- Public comment text, Comment ID, and comment timestamp
- Commenter public Instagram username and user ID
- Tagged posts, story mentions, and parent comment thread IDs
- Like counts and moderation status (hidden/visible)
Powers real-time comment automation (e.g., instantly sending download links or discount codes when followers comment specific keywords like "GUIDE" or "LINK") and enables automatic moderation of spam and toxic remarks.
Performance Analytics
"The instagram_business_manage_insights permission allows an app to get insights from the app user's Instagram professional account metadata, posts, photos, and videos; and insights for an Instagram professional account's public profile metadata and media."
- Aggregate post reach, impressions, saves, shares, and comment counts
- Reel video plays, watch time, and replay metrics
- Account-level follower growth trends, profile visits, and website taps
Provides creators with visual performance charts, engagement rate breakdowns, and audience growth analytics so creators can optimize their content strategy based on verified metrics.
Direct Message Automation
"The instagram_business_manage_messages permission allows an app to access messages on an Instagram professional account."
- Incoming and outgoing direct message text and quick-reply selections
- Sender Instagram Scoped ID (IGSID) and interaction timestamps
- Media attachments shared inside direct message threads
- Story reply mentions and icebreaker interaction triggers
Powers 24/7 direct message automated funnels, lead magnet deliveries (e.g. sending a PDF link upon story reply), FAQ auto-responses, and powers the collaborative Shared Team Inbox.
Shared Inbox Personalization
"The Business Asset User Profile Access feature allows your app to read the User Fields for users engaging with your business assets such as id, ids_for_business, name, and picture."
- Public display name of the customer interacting with your Instagram account
- Public profile picture URL of the customer messaging your business
- Scoped User ID (`id`) and Business Asset Scoped ID (`ids_for_business`)
Displays the follower’s profile name and avatar inside the IGENT Shared Inbox so human customer support agents know who they are speaking with, enabling warm, personalized customer service.
7-Day Support Tag (`human_agent`)
"The Human Agent feature allows your app to have a human agent respond to user messages using the human_agent tag within 7 days of a user's message."
- Manual outbound message content composed by an authenticated human agent
- Meta `human_agent` message tag parameter attached to the API call
- Response timestamp within 1 to 7 days of the customer’s inbound inquiry
Allows live human support agents to respond to complex customer support inquiries, partnership inquiries, or order issues up to 7 days after the customer’s initial message, extending beyond the standard 24-hour limit.
3. Absolute Prohibition on the Sale or Transfer of Meta Data
IGENT does not sell, rent, lease, trade, license, or transfer Meta User Data under any circumstances. We do not transfer Instagram profile data, follower details, message logs, or analytics to data brokers, advertising exchanges, information resellers, or third-party networks.
Follower data is never used for surveillance, cross-site retargeting, or advertising profiling.
We do not use private direct messages or customer inbox transcripts to train public or foundation AI models.
Data is processed solely to fulfill the explicit automation actions configured directly by the account owner.
4. Technical Security, Encryption at Rest & Transit
In compliance with Meta Platform Terms Section 5 (Data Security), IGENT maintains state-of-the-art technical safeguards:
All Meta Access Tokens are encrypted at rest using military-grade AES-256 in Galois/Counter Mode (GCM) with tenant-specific salt. Plaintext access tokens are never logged.
All communications between the creator’s browser, our production cloud servers, and Meta’s Graph API endpoints are strictly encrypted using TLS 1.3 / HTTPS.
5. Meta Messaging Policy, 24-Hour Window & Human Agent Feature
IGENT adheres strictly to Meta’s official Messenger API for Instagram Policies regarding standard messaging windows and acceptable tags:
Automated bot triggers and keyword flows execute strictly within 24 hours of a customer initiating contact.
Live human support agents in the Shared Inbox are permitted to respond up to 7 days (168 hours) after the user's message.
6. User Data Deletion Instructions & Meta Automated Callback
In accordance with Meta Developer Policy Section 3.d, every user and creator has the unconditional right to request the permanent erasure of their data at any time.
When you remove IGENT in your Facebook settings, Meta sends a signed HMAC request to our compliant endpoint: https://igent.cgs360.in/api/meta/compliance/deletion. Our backend automatically parses the user ID, deletes all associated tokens and conversation caches, and returns a unique confirmation tracking code.
7. Creator Content Rights
You own 100% of your content. IGENT claims zero ownership, copyright, or intellectual property rights over any images, video reels, captions, or graphics scheduled or published through our platform.
8. Global Privacy Rights (GDPR, CCPA/CPRA & DPDP)
Depending on your location, you have statutory rights concerning your personal data and Instagram data:
Request an export of all personal data, connected accounts, and configuration records we maintain.
Demand permanent deletion of all stored messages, tokens, and profiles via our self-service tools or deletion endpoint.
Correct any inaccurate personal details or update disconnected credentials.
Disconnect your Meta Instagram account at any time to instantly revoke all API access.
9. Authorized Sub-Processors & Infrastructure
We work only with enterprise-grade sub-processors that maintain SOC 2, ISO 27001, and GDPR compliance certifications:
Instagram Graph API & Webhooks provider. Processes message transmissions and content publishing.
Serverless application hosting, encrypted Firestore databases, and media storage in secure US/global regions.
PCI-DSS Level 1 compliant payment processing for platform subscription billing.
10. Contact Us & Data Protection Officer
Privacy Office: privacy@cgs360.in
Legal Department: legal@cgs360.in
General Support: support@cgs360.in