Privacy Policy

1. Data controller

The data controller is Vitze Home. The application is used to manage content, comments and messages for Instagram business accounts owned by Vitze Home. Contact: info@vitzetekstil.com.

2. Data we process

Once an Instagram/Meta connection is established we process:

• Account and profile data: Instagram business account ID, username, display name and profile picture, connected Facebook page ID and name.
• Content data: posts, images, videos and captions published through the account.
• Comment data: comments on posts, the commenting account's username and ID, and the comment timestamp.
• Message data: the content of Instagram Direct messages sent and received, sender/recipient account IDs and timestamps.
• Insights data: aggregated account and media statistics (reach, engagement, impressions).
• Technical data: access tokens issued by Meta, granted permission scopes, token expiry dates and system logs.

The application does not collect or request national ID numbers, payment card details, health data or other special categories of personal data through Instagram.

3. Purposes and legal basis

• Publishing posts to the Instagram account and managing the publishing schedule.
• Answering incoming comments and messages from a single screen and tracking requests.
• Matching customer requests with quotation and order processes.
• Measuring and reporting account performance.
• Preventing abuse and keeping security and audit records.

Processing is based on the performance of a contract, legitimate interest and — where required — explicit consent. Instagram data is never sold, rented or transferred to third parties for marketing or advertising purposes.

4. Retention period

Messages, comments and transaction records are retained for 5 (five) years from the date the record was created, in line with commercial and legal obligations. After that period records are deleted or irreversibly anonymised. Access tokens are stored only while the connection is active and are deleted immediately when the connection is removed. If a deletion request is received, all data other than the minimum records required for the purposes in section 3 is deleted without waiting for the retention period to elapse.

5. Security

Access tokens are stored encrypted with AES-256-GCM. Application secrets are never hard-coded, never written to logs and are masked when displayed. Every callback received from Meta is processed only after its HMAC-SHA256 signature has been verified. All connections use HTTPS.

6. Transfers and processors

Data is hosted on Vitze Home's own servers. Meta Platforms, Inc. acts as the source of the data. Data may be shared with competent public authorities where legally required.

7. Your rights and data deletion

You have the right to access, rectify and erase your personal data and to object to its processing. To request deletion:

• Use the form at /veri-silme; you will receive a confirmation code you can use to track the request.
• When you remove the application from your Instagram/Facebook settings, Meta automatically sends us a deletion callback and the request is recorded in the same way.
• Or write directly to info@vitzetekstil.com.

Requests are resolved within 30 days at the latest and the outcome is communicated to you.

8. Changes

This policy may be updated. The current version is always published on this page; the "Last updated" date at the top indicates the effective version.