ChatSparkPrivacy Policy
ChatSpark is a practice tool that helps you write better replies to your Instagram direct messages. This page explains what information we handle, why, who else sees it, and how to get rid of it. We keep it short and plain on purpose.
1. What we access
When you connect Instagram, you approve these permissions on Instagram's own consent screen:
| Permission | What we use it for |
|---|---|
instagram_business_basic | Your Instagram user ID and username, to show who is signed in. |
instagram_business_manage_messages | To list your conversations, read the messages in the chat you open, and send a reply only when you press Send. |
We never post, follow, like, or message anyone automatically. Nothing is sent from your account unless you review the text and press Send yourself.
2. What we store, and for how long
- Access token and profile basics (your Instagram user ID and username) are kept in a temporary login session on our server so you stay signed in. A session ends when you log out, when you delete your data, after 7 days, or when the server restarts, whichever comes first.
- Your messages are not saved. Conversations are fetched from Instagram each time you open them and shown to you. We do not keep a copy in a database or on disk.
- Preferences such as your last chosen tone are stored in your own browser (local storage), not on our server.
- Technical logs may record errors (for example a failed request). We do not write message contents to logs.
3. Who else receives your data
- Instagram / Meta provides sign-in and the messaging data. Their handling is covered by Instagram's Privacy Policy.
- AI service (via OpenRouter). When you press Spark replies, the recent messages of that one conversation, the other person's display name, and your tone and style choices are sent to an AI model, through OpenRouter, to generate reply suggestions. This happens only on your request and only for the chat you have open. The model provider processes the text under its own terms.
- Hosting and networking providers carry the traffic that makes the app reachable.
We do not sell your data, share it for advertising, or use it to train models of our own.
4. A note about the other person in your chats
Your conversations include messages written by other people. We use them only to help you draft your reply, and only while you are using the app. Please use ChatSpark responsibly and respect the people you talk to.
5. Your choices and rights
- Disconnect any time: in Instagram go to Settings → Apps and websites and remove ChatSpark. We receive a deauthorization notice and delete your session.
- Delete your data: use the Delete my data page, which signs you out and erases your session and token immediately and gives you a confirmation code.
- Ask us: you can request access, correction, or deletion by contacting . Depending on where you live (for example under GDPR or CCPA) you may have additional rights, and we will honor them.
6. Security
Sign-in uses Instagram's official OAuth flow over HTTPS, so your Instagram password never reaches ChatSpark. Sessions use HTTP-only cookies. No system is perfectly secure, so if you think your account was affected, remove ChatSpark in Instagram's settings and contact us.
7. Age requirement
ChatSpark is not for children under 13 (or the minimum age in your country). Instagram's own age rules also apply.
8. Changes
If we change this policy in a meaningful way, we will update the date above and, where appropriate, tell you in the app.
9. Contact
Questions or requests: