Privacy Policy
Last updated: 24 September 2026
MsgMatrix Panel (“we”, “the service”) is a SaaS inbox that lets other businesses connect their Instagram Professional accounts and manage Direct Messages and comments.
Data we process
- Account data: email, hashed password, workspace name.
- Instagram / Facebook connection data: Instagram user ID, username, page ID, access tokens needed to call Meta APIs.
- Inbox data: conversation participant IDs, usernames, message text, media CDN URLs, reactions, story mention metadata.
- Comment data: comment IDs, usernames, comment text, hide state.
What we do not store
We do not download or permanently store Instagram Story media files. Story mention and story reply media are rendered in the agent browser from Meta’s temporary CDN URL (or a short-lived display proxy). When a story expires, we show “Story no longer available”.
Why we need Meta permissions
instagram_business_basic (or instagram_basic) identifies the connected professional account. instagram_business_manage_messages (or instagram_manage_messages) powers Live Inbox receive/reply. instagram_business_manage_comments (or instagram_manage_comments) powers comment moderation. Page permissions are used only on the Facebook Login path to list pages, read engagement, and subscribe webhooks.
Sharing
We send messages and comment actions to Meta’s Graph API on behalf of the connected business. We do not sell personal data.
Retention and deletion
A business can disconnect Instagram and request deletion. End users of Instagram may use Meta’s data deletion callback. See Data deletion.