Privacy policy

Last updated: 4 October 2026.

Operator and contact

Leonardo Dimitrov operates PhoneFarm Inbox. Contact leonardodimitrov51@gmail.com about privacy, access, correction or deletion.

What this initial service receives

When an Instagram professional account is connected, Meta can send its messaging events to this service. These events can contain account and participant identifiers, message text, timestamps, attachment references, and delivery or interaction metadata. An attachment reference can contain a private media URL. This receiver does not download attachments.

Purpose and access

We use these events to receive and troubleshoot messages for connected accounts. The operator administers the service. Message contents are not publicly accessible. This initial version does not send replies, send message content to an AI provider, sell message data, or use it to train an AI model.

Storage and service providers

The service runs on a Hetzner server. Meta provides Instagram and delivers the events under its own policies. Message payloads are encrypted in the service database, and transport uses HTTPS. The service operator controls the encryption key. Encryption does not remove the operator's ability to access data.

Retention

Webhook receipts are retained for up to 30 days, with expiry checked every 15 minutes while the maintenance service operates. An outage can delay expiry until maintenance recovers. There are currently no separate message backups. Technical service logs exclude message bodies and access tokens.

Your choices

You can ask to access, correct or delete your data using the contact above. We may need to verify your identity or authority over an account before disclosing or deleting data. Connected account owners can revoke the integration through Instagram to stop future access. Revocation does not itself erase already received data. See the deletion instructions.

Changes

Adding account login, AI replies, additional providers or longer-term conversation memory requires updating this policy before those features receive real user data.