Privacy Policy

Privacy Policy for A Custom Song

Effective Date: August 16, 2025

Last Updated: August 16, 2025

1. Introduction

This Privacy Policy describes how M7 Corporation Pvt Ltd ("we," "us," or "our") collects, uses, and shares information when you use A Custom Song ("the App"), our Instagram messaging integration service.

Company Information:

• Company: M7 Corporation Pvt Ltd
• App Name: A Custom Song
• Contact: support@acustomsong.com
• Address: 6 Dhanammal Street, Spurtank Road, Chetpet, Chennai 600031, India

2. Information We Collect

2.1 Instagram Account Information

When you connect your Instagram business account to our service, we collect:

• Instagram User ID and username
• Profile information (name, bio, profile picture)
• Business account verification status
• Account type (Business/Creator)

2.2 Instagram Messaging Data

Through Instagram's Messaging API, we collect:

• Direct Messages: Content of messages you send and receive
• Message Metadata: Timestamps, message IDs, conversation IDs
• Participant Information: User IDs of conversation participants
• Message Status: Delivery confirmations and read receipts
• Media Content: Photos, videos, and other media shared via CDN URLs
• Message Reactions: Reactions to messages (likes, loves, etc.)

2.3 Instagram Content Data

We may access:

• Comments: Comments on your posts for moderation purposes
• Mentions: When your account is mentioned by other users
• Story Interactions: Story replies and mentions
• Media Information: Posts, captions, hashtags, and media metadata

2.4 Technical Information

We automatically collect:

• Device Information: Device type, operating system, browser type
• IP Address and Location: For security and service provision
• Usage Analytics: How you interact with our service
• Webhook Data: Real-time notifications from Instagram's servers
• Access Tokens: For API authentication (encrypted and secured)

2.5 Contact and Account Information

• Email address for account management
• Name and business information you provide
• Communication preferences and settings

3. How We Use Your Information

3.1 Service Provision

• Message Management: Enable sending, receiving, and organizing Instagram messages
• Automation: Provide automated response capabilities
• Analytics: Generate insights about message performance and engagement
• Content Moderation: Help manage comments and mentions on your content

3.2 Technical Operations

• API Integration: Connect and maintain integration with Instagram's platform
• Webhook Processing: Handle real-time notifications from Instagram
• Security: Monitor for unauthorized access and protect your account
• Performance: Optimize service speed and reliability

3.3 Customer Support

• Issue Resolution: Provide technical support and troubleshooting
• Feature Development: Improve our service based on usage patterns
• Communication: Send service updates and important notifications

3.4 Legal Compliance

• Regulatory Requirements: Comply with applicable laws and regulations
• Platform Policies: Ensure compliance with Meta's Platform Terms
• Data Protection: Implement required privacy and security measures

4. How We Share Your Information

4.1 With Meta/Instagram

• We share necessary data with Meta's platform to provide Instagram messaging functionality
• This includes authentication tokens and API requests as required by Instagram's terms
• We comply with Meta's data sharing requirements and Platform Policies

4.2 Service Providers

We may share information with trusted third-party service providers who:

• Help us operate and maintain our service
• Provide hosting, analytics, or security services
• Are bound by confidentiality agreements and data protection requirements

4.3 Legal Requirements

We may disclose information when required to:

• Comply with applicable laws, regulations, or court orders
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Respond to government requests

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

We do not sell your personal information to third parties.

5. Data Retention and Storage

5.1 Retention Periods

• Message Data: Retained for 3 years from last activity or until account deletion
• Account Information: Retained for 2 years after account closure
• Analytics Data: Aggregated data retained for 5 years for business insights
• Access Logs: Security logs retained for 1 year
• Legal Requirements: Some data may be retained up to 7 years to comply with legal obligations

5.2 Media Content Handling

• CDN URLs: We store only privacy-aware CDN URLs, not the actual media content
• Automatic Expiration: URLs become invalid when content is deleted or expires
• No Unauthorized Storage: We do not download, retain, or store media content without consent

5.3 Data Deletion

You can request deletion of your data at any time. We will:

• Remove your account information within 30 days
• Delete associated message data and analytics
• Notify relevant service providers of the deletion request

6. Your Rights and Choices

6.1 Access and Control

• Data Access: Request a copy of your personal information
• Data Correction: Update or correct inaccurate information
• Data Deletion: Request deletion of your personal information
• Account Settings: Control privacy settings within our platform

6.2 Instagram Account Control

• Disconnect Account: You can disconnect your Instagram account at any time
• Permission Management: Control which permissions you grant to our app
• Message Control: Delete messages through Instagram's interface

6.3 Communication Preferences

• Opt-out: Unsubscribe from marketing communications
• Support Escalation: Request human agent assistance when needed
• Notification Settings: Control how and when we contact you

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place through:

• Standard Contractual Clauses for data transfers
• Adequacy Decisions where applicable
• Other lawful transfer mechanisms as required by law

8. Regional Privacy Rights

8.1 India (Personal Data Protection)

As an India-based service, we comply with applicable Indian data protection laws and provide:

• Access to your personal data upon request
• Correction of inaccurate or incomplete data
• Data Portability in commonly used formats
• Withdrawal of Consent for processing based on consent
• Grievance Redressal through our designated contact channels

8.2 California (CCPA/CPRA)

For California residents using our service, you have the right to:

• Know what personal information is collected and how it's used
• Delete personal information (with certain exceptions)
• Opt-out of the sale of personal information (we do not sell data)
• Non-discrimination for exercising privacy rights

8.3 Other Jurisdictions

We comply with applicable data protection laws in all jurisdictions where we operate.

9. Security Measures

We implement industry-standard security measures including:

• Encryption: Data encrypted in transit and at rest
• Access Controls: Limited access on a need-to-know basis
• Regular Audits: Security assessments and compliance reviews
• Incident Response: Procedures for handling security breaches
• Staff Training: Regular privacy and security training for employees

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly and notify parents/guardians as required by applicable law.

11. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will:

• Notify you via email or through our service
• Update the "Last Updated" date at the top of this policy
• Provide you with the opportunity to review changes before they take effect
• Obtain consent where required by applicable law

12. Third-Party Integrations

12.1 Instagram/Meta Platform

Our service integrates with Instagram's platform and is subject to:

• Meta Privacy Policy
• Instagram Terms of Service
• Meta Platform Terms: Available at Meta for Developers

12.2 Other Third-Party Services

We may integrate with other services to provide enhanced functionality. Each integration is governed by the respective service's privacy policy and terms.

13. Do Not Track Signals

Our service does not currently respond to "Do Not Track" signals from web browsers. However, you can control data collection through your account settings and privacy preferences.

14. Cookie Policy

We use cookies and similar technologies to:

• Maintain your session and keep you logged in
• Analyze usage to improve our service
• Provide security features and prevent fraud

You can control cookies through your browser settings, but this may affect service functionality.

15. Automated Decision Making

We may use automated processing for:

• Message routing and prioritization
• Spam detection and content filtering
• Service optimization and performance monitoring

You have the right to request human review of automated decisions that significantly affect you.

16. Data Breach Notification

In the event of a data breach that may affect your personal information, we will:

• Notify authorities within 72 hours where required by law
• Inform affected users without undue delay
• Provide details about the breach and steps being taken
• Offer assistance and protective measures

17. Contact Information

For questions about this Privacy Policy or to exercise your rights, contact us:

• M7 Corporation Pvt Ltd
• Email: support@acustomsong.com
• Address: 6 Dhanammal Street, Spurtank Road, Chetpet, Chennai 600031, India
• Phone: +91-8069169691
• Data Protection Officer: privacy@acustomsong.com
• Privacy Policy URL: https://acustomsong.com/privacy_policy
• Response Time: We will respond to privacy requests within 30 days (or as required by applicable law).

18. Compliance Certifications

Our privacy practices are designed to comply with:

• Information Technology Act, 2000 (India)
• California Consumer Privacy Act (CCPA/CPRA)
• Personal Information Protection and Electronic Documents Act (PIPEDA)
• Children's Online Privacy Protection Act (COPPA)
• Other applicable privacy laws and regulations

We regularly review and update our practices to maintain compliance with evolving privacy requirements.

19. Consent and Lawful Basis

We process your personal information based on:

• Consent: Where you have provided explicit consent
• Contract Performance: To provide our service to you
• Legitimate Interests: For business operations and service improvement
• Legal Obligations: To comply with applicable laws

You can withdraw consent at any time where processing is based on consent.

This Privacy Policy is designed to meet Meta's app review requirements and applicable privacy laws. Last updated: August 16, 2025

To be hosted at: https://acustomsong.com/privacy_policy