Privacy Policy
Last Updated: October 8, 2025
chatmerge.ai, operated by Marcadeo, is a platform that integrates with the Instagram Graph API and WhatsApp Business API to provide services for Instagram Business/Creator accounts and WhatsApp Business accounts. These services include Instagram profile management, direct messaging, comment moderation, content publishing, performance analytics, and WhatsApp automated messaging, template management, and business profile management. This Privacy Policy explains how we collect, use, disclose, and safeguard your information, including data accessed via the Instagram Graph API permissions (instagram_business_basic, instagram_business_manage_messages, instagram_business_manage_comments, instagram_business_content_publish, instagram_business_manage_insights) and WhatsApp Business API permissions (whatsapp_business_management, whatsapp_business_messaging, messaging, template management), in compliance with Meta’s Platform Terms and WhatsApp Business Platform policies. By using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.
1. Information We Collect
We collect information to provide and improve our services, including data accessed through the Instagram Graph API and WhatsApp Business API with your explicit consent. The types of information we collect include:
a. Instagram Account Data
With your authorization, we access the following data from your Instagram Business or Creator account via the Instagram Graph API:
- Profile Data: Username, biography, followers count, media count, and profile picture URL (via
instagram_business_basicandinstagram_business_manage_insightsscopes). - Media Data: Details of posts, Reels, or carousels you own or publish, including captions, media URLs, timestamps, and media types (via
instagram_business_basicandinstagram_business_content_publishscopes). - Insights Data: Performance metrics for your profile (e.g., followers count, profile visits) and media (e.g., reach, likes, comments, shares, saved, views, total interactions, video view time for Reels) (via
instagram_business_manage_insightsscope). - Comments Data: Comments on your posts and replies you create (via
instagram_business_manage_commentsscope). - Direct Messages: Messages in your Instagram Direct inbox and messages you send (via
instagram_business_manage_messagesscope).
b. WhatsApp Account Data
With your authorization, we access the following data from your WhatsApp Business account via the WhatsApp Business API:
- Profile Data: WhatsApp Business profile details, such as business name, phone number ID, profile picture, about text, address, description, email, website, and WhatsApp Business Account ID (WABA ID) (via
whatsapp_business_managementscope). - Messages: Incoming and outgoing messages, including text messages, media (e.g., images, documents), and metadata (e.g., sender phone number, timestamps) (via
whatsapp_business_messagingscope). - Templates: Message templates used for automated responses, including template names, languages, categories, components, and parameters (e.g., placeholders for dynamic content) (via
whatsapp_business_managementscope). - Automation Data: Keyword automation settings, such as keywords, match types (exact, contains, startsWith, endsWith), and associated templates for automated replies.
c. Consent via OAuth
When you connect your Instagram Business/Creator or WhatsApp Business account to chatmerge.ai, you will be prompted to grant permissions through the Instagram OAuth Dialog (for Instagram) or WhatsApp Business API OAuth flow (for WhatsApp). These processes allow you to explicitly consent to us accessing your Instagram data (e.g., profile, media, insights, messages, comments) and WhatsApp data (e.g., profile, messages, templates, automation settings) as described above. You can review and approve these permissions during the login flow, and a link to this Privacy Policy will be provided to inform your decision.
d. User-Provided Information
- Authentication Data: Email address, Instagram access tokens, and WhatsApp access tokens provided during OAuth authorization to connect your accounts to the App.
- Contact Information: If you contact us for support, we may collect your name, email address, or other information you provide.
- Content Data: Media files (e.g., JPEG images, MP4 videos), captions, alt text, or message templates you upload or provide for publishing Instagram posts, Reels, carousels, or sending WhatsApp messages.
- Automation Configuration: Keywords, match types, and template parameters you configure for WhatsApp automation.
- Business Profile Configuration: Information you provide to manage your WhatsApp Business profile, such as profile picture, about text, address, description, email, or website.
e. Technical Data
- Usage Data: Information about how you interact with the App, such as features used (e.g., publishing posts, viewing insights, configuring WhatsApp automations or business profiles), timestamps, and session duration.
- Device Data: IP address, browser type, operating system, and device identifiers.
- Cookies and Tracking: We may use cookies or similar technologies to enhance your experience and analyze usage. You can manage cookie preferences through your browser settings.
2. How We Use Your Information
We use the collected information to:
- Provide Services: Enable features such as viewing and managing your Instagram profile, managing comments, sending/receiving Instagram direct messages, publishing Instagram posts, Reels, or carousels, accessing Instagram performance analytics, managing your WhatsApp Business profile, sending/receiving WhatsApp messages, and managing WhatsApp automated responses using keyword-based templates.
- Improve the App: Analyze usage patterns and aggregated, de-identified insights (e.g., Instagram post performance trends, WhatsApp automation effectiveness, business profile engagement) to enhance functionality, suggest optimal posting or messaging strategies, and improve user experience.
- Communicate with You: Respond to your inquiries, provide customer support, and send service-related notifications (e.g., WhatsApp template approval status, business profile updates).
- Comply with Legal Obligations: Meet requirements under applicable laws, regulations, or Meta’s policies for both Instagram and WhatsApp.
- Ensure Security: Detect and prevent fraud, unauthorized access, or other misuse of the App.
3. How We Share Your Information
We do not sell your personal information. We may share your information in the following cases:
- With Meta: Data accessed via the Instagram Graph API or WhatsApp Business API (e.g., for publishing, insights, messaging, or profile management) is processed in accordance with Meta’s Developer Policies, WhatsApp Business Platform policies, and Terms of Service.
- Service Providers: We may share data with trusted third-party providers who assist in operating the App (e.g., analytics or hosting on our Ubuntu server), subject to strict confidentiality agreements.
- Legal Requirements: If required by law, regulation, or legal process, we may disclose information to authorities or third parties.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to a successor entity.
4. Data Storage and Security
- Storage: Your data is stored securely on our Ubuntu server with AES-256 encryption and access controls. Instagram and WhatsApp data accessed via their respective APIs (e.g., media, insights, messages, templates, business profiles) is stored temporarily and only as needed to provide services.
- Retention: We retain your data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Instagram and WhatsApp access tokens are refreshed or deleted upon revocation of access.
- Security Measures: We implement industry-standard measures, such as AES-256 encryption, firewalls, and secure authentication, to protect your data. However, no system is completely secure, and we cannot guarantee absolute security.
5. Your Rights and Choices
Depending on your location (e.g., under GDPR or CCPA), you may have the following rights:
- Access: Request a copy of the personal data we hold about you, including Instagram profile, media, insights, WhatsApp messages, templates, automation settings, or business profile data.
- Correction: Request corrections to inaccurate or incomplete data.
- Deletion: Request deletion of your data, subject to legal or contractual limitations.
- Restriction: Request restrictions on how we process your data.
- Data Portability: Request a copy of your data in a structured, machine-readable format.
- Opt-Out: You can revoke chatmerge.ai’s access to your Instagram or WhatsApp account at any time via the Instagram, Facebook, or WhatsApp app settings (under “Business Integrations” or “Apps and Websites”). This will stop further data collection (e.g., insights, publishing, messaging, profile management) and delete associated access tokens from our systems, in accordance with Meta’s policies.
To exercise these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law.
6. Third-Party Services
The App integrates with the Instagram Graph API and WhatsApp Business API, subject to Meta’s Platform Terms (https://developers.facebook.com/terms) and WhatsApp Business Platform policies (https://developers.facebook.com/docs/whatsapp/business-management-api). Data shared with Meta is governed by their privacy policies. We are not responsible for the privacy practices of Meta or other third-party services linked from the App.
7. International Data Transfers
Your data may be transferred to and processed in countries other than your own, including servers hosted in India or other regions, where our Ubuntu server or service providers are located. We ensure appropriate safeguards, such as Standard Contractual Clauses, for international data transfers as required by law.
8. Children’s Privacy
The App is not intended for individuals under 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected such data, please contact us to have it removed.
9. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or a notice in the App. The updated policy will take effect upon posting, with the “Last Updated” date revised.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:
Marcadeo
127/1, W-1, Juhi Kalan, Saket Nagar
Kanpur, Uttar Pradesh 208014
[email protected]
+91 6388807379
chatmerge.ai.ai
For complaints, you may also contact your local data protection authority.
This Privacy Policy complies with Meta’s requirements for the Instagram Graph API, WhatsApp Business API, and applicable data protection laws. Please review it carefully and ensure it is accessible via a publicly available URL for Meta’s App Review process.
