A Custom Song

Privacy Policy for A Custom Song

Effective Date: August 16, 2025

Last Updated: August 16, 2025

1. Introduction

This Privacy Policy describes how M7 Corporation Pvt Ltd ("we," "us," or "our") collects, uses, and shares information when you use A Custom Song ("the App"), our Instagram messaging integration service.

Company Information:

Company: M7 Corporation Pvt Ltd
App Name: A Custom Song
Contact: support@acustomsong.com
Address: 6 Dhanammal Street, Spurtank Road, Chetpet, Chennai 600031, India

2. Information We Collect

2.1 Instagram Account Information

When you connect your Instagram business account to our service, we collect:

Instagram User ID and username
Profile information (name, bio, profile picture)
Business account verification status
Account type (Business/Creator)

2.2 Instagram Messaging Data

Through Instagram's Messaging API, we collect:

Direct Messages: Content of messages you send and receive
Message Metadata: Timestamps, message IDs, conversation IDs
Participant Information: User IDs of conversation participants
Message Status: Delivery confirmations and read receipts
Media Content: Photos, videos, and other media shared via CDN URLs
Message Reactions: Reactions to messages (likes, loves, etc.)

2.3 Instagram Content Data

We may access:

Comments: Comments on your posts for moderation purposes
Mentions: When your account is mentioned by other users
Story Interactions: Story replies and mentions
Media Information: Posts, captions, hashtags, and media metadata

2.4 Technical Information

We automatically collect:

Device Information: Device type, operating system, browser type
IP Address and Location: For security and service provision
Usage Analytics: How you interact with our service
Webhook Data: Real-time notifications from Instagram's servers
Access Tokens: For API authentication (encrypted and secured)

2.5 Contact and Account Information

Email address for account management
Name and business information you provide
Communication preferences and settings

3. How We Use Your Information

3.1 Service Provision

Message Management: Enable sending, receiving, and organizing Instagram messages
Automation: Provide automated response capabilities
Analytics: Generate insights about message performance and engagement
Content Moderation: Help manage comments and mentions on your content

3.2 Technical Operations

API Integration: Connect and maintain integration with Instagram's platform
Webhook Processing: Handle real-time notifications from Instagram
Security: Monitor for unauthorized access and protect your account
Performance: Optimize service speed and reliability

3.3 Customer Support

Issue Resolution: Provide technical support and troubleshooting
Feature Development: Improve our service based on usage patterns
Communication: Send service updates and important notifications

3.4 Legal Compliance

Regulatory Requirements: Comply with applicable laws and regulations
Platform Policies: Ensure compliance with Meta's Platform Terms
Data Protection: Implement required privacy and security measures

4. How We Share Your Information

4.1 With Meta/Instagram

We share necessary data with Meta's platform to provide Instagram messaging functionality
This includes authentication tokens and API requests as required by Instagram's terms
We comply with Meta's data sharing requirements and Platform Policies

4.2 Service Providers

We may share information with trusted third-party service providers who:

Help us operate and maintain our service
Provide hosting, analytics, or security services
Are bound by confidentiality agreements and data protection requirements

4.3 Legal Requirements

We may disclose information when required to:

Comply with applicable laws, regulations, or court orders
Protect our rights, property, or safety
Prevent fraud or security threats
Respond to government requests

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

We do not sell your personal information to third parties.

5. Data Retention and Storage

5.1 Retention Periods

Message Data: Retained for 3 years from last activity or until account deletion
Account Information: Retained for 2 years after account closure
Analytics Data: Aggregated data retained for 5 years for business insights
Access Logs: Security logs retained for 1 year
Legal Requirements: Some data may be retained up to 7 years to comply with legal obligations

5.2 Media Content Handling

CDN URLs: We store only privacy-aware CDN URLs, not the actual media content
Automatic Expiration: URLs become invalid when content is deleted or expires
No Unauthorized Storage: We do not download, retain, or store media content without consent

5.3 Data Deletion

You can request deletion of your data at any time. We will:

Remove your account information within 30 days
Delete associated message data and analytics
Notify relevant service providers of the deletion request

6. Your Rights and Choices

6.1 Access and Control

Data Access: Request a copy of your personal information
Data Correction: Update or correct inaccurate information
Data Deletion: Request deletion of your personal information
Account Settings: Control privacy settings within our platform

6.2 Instagram Account Control

Disconnect Account: You can disconnect your Instagram account at any time
Permission Management: Control which permissions you grant to our app
Message Control: Delete messages through Instagram's interface

6.3 Communication Preferences

Opt-out: Unsubscribe from marketing communications
Support Escalation: Request human agent assistance when needed
Notification Settings: Control how and when we contact you

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place through:

Standard Contractual Clauses for data transfers
Adequacy Decisions where applicable
Other lawful transfer mechanisms as required by law

8. Regional Privacy Rights

8.1 India (Personal Data Protection)

As an India-based service, we comply with applicable Indian data protection laws and provide:

Access to your personal data upon request
Correction of inaccurate or incomplete data
Data Portability in commonly used formats
Withdrawal of Consent for processing based on consent
Grievance Redressal through our designated contact channels

8.2 California (CCPA/CPRA)

For California residents using our service, you have the right to:

Know what personal information is collected and how it's used
Delete personal information (with certain exceptions)
Opt-out of the sale of personal information (we do not sell data)
Non-discrimination for exercising privacy rights

8.3 Other Jurisdictions

We comply with applicable data protection laws in all jurisdictions where we operate.

9. Security Measures

We implement industry-standard security measures including:

Encryption: Data encrypted in transit and at rest
Access Controls: Limited access on a need-to-know basis
Regular Audits: Security assessments and compliance reviews
Incident Response: Procedures for handling security breaches
Staff Training: Regular privacy and security training for employees

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly and notify parents/guardians as required by applicable law.

11. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will:

Notify you via email or through our service
Update the "Last Updated" date at the top of this policy
Provide you with the opportunity to review changes before they take effect
Obtain consent where required by applicable law

12. Third-Party Integrations

12.1 Instagram/Meta Platform

Our service integrates with Instagram's platform and is subject to:

Meta Privacy Policy
Instagram Terms of Service
Meta Platform Terms: Available at Meta for Developers

12.2 Other Third-Party Services

We may integrate with other services to provide enhanced functionality. Each integration is governed by the respective service's privacy policy and terms.

13. Do Not Track Signals

Our service does not currently respond to "Do Not Track" signals from web browsers. However, you can control data collection through your account settings and privacy preferences.

14. Cookie Policy

We use cookies and similar technologies to:

Maintain your session and keep you logged in
Analyze usage to improve our service
Provide security features and prevent fraud

You can control cookies through your browser settings, but this may affect service functionality.

15. Automated Decision Making

We may use automated processing for:

Message routing and prioritization
Spam detection and content filtering
Service optimization and performance monitoring

You have the right to request human review of automated decisions that significantly affect you.

16. Data Breach Notification

In the event of a data breach that may affect your personal information, we will:

Notify authorities within 72 hours where required by law
Inform affected users without undue delay
Provide details about the breach and steps being taken
Offer assistance and protective measures

17. Contact Information

For questions about this Privacy Policy or to exercise your rights, contact us:

M7 Corporation Pvt Ltd
Email: support@acustomsong.com
Address: 6 Dhanammal Street, Spurtank Road, Chetpet, Chennai 600031, India
Phone: +91-8069169691
Data Protection Officer: privacy@acustomsong.com
Privacy Policy URL: https://acustomsong.com/privacy_policy
Response Time: We will respond to privacy requests within 30 days (or as required by applicable law).

18. Compliance Certifications

Our privacy practices are designed to comply with:

Information Technology Act, 2000 (India)
California Consumer Privacy Act (CCPA/CPRA)
Personal Information Protection and Electronic Documents Act (PIPEDA)
Children's Online Privacy Protection Act (COPPA)
Other applicable privacy laws and regulations

We regularly review and update our practices to maintain compliance with evolving privacy requirements.

19. Consent and Lawful Basis

We process your personal information based on:

Consent: Where you have provided explicit consent
Contract Performance: To provide our service to you
Legitimate Interests: For business operations and service improvement
Legal Obligations: To comply with applicable laws

You can withdraw consent at any time where processing is based on consent.

This Privacy Policy is designed to meet Meta's app review requirements and applicable privacy laws. Last updated: August 16, 2025

To be hosted at: https://acustomsong.com/privacy_policy

Privacy Policy