Privacy Policy

Last updated: 11 October 2026

This Privacy Policy explains how Baxii ("Baxii", "we", "us" or "our"), operating the service at baxii.ai, collects, uses, stores, shares and protects information when you use our Instagram customer-intelligence platform (the "Service"). It also describes how we handle data obtained through the Instagram and Google APIs. By creating an account or connecting an Instagram account, you agree to this Policy.

1. Information we collect

Account information

When you register, we collect your email address and a securely hashed password. If you sign in with Google, we receive your Google account's email address and basic profile information (name) from Google; we do not receive your Google password.

Instagram data (only with your authorization)

When you connect an Instagram professional (business or creator) account using the official Instagram API, you authorize us to access, on your behalf, data such as:

• Your Instagram profile basics (username, account id, account type).
• Your media (posts/reels) and their metadata and metrics (captions, timestamps, like and comment counts).
• Comments on your media, including the commenter's username and comment text.
• Direct messages (conversations) to your account, including sender identifiers and message text, where you grant the messaging permission.

We access this data only to provide the Service to you, and only while your account remains connected.

Usage, billing and support data

• Usage data — actions you take in the dashboard, feature usage, and processed-item counts for billing.
• Billing data — subscription and payment processing is handled by Stripe. We do not store full card numbers; we store a customer/subscription identifier and plan status.
• Support chat — messages you send through the in-app support chat, and your name/email if you provide them.
• Technical data — session cookies, IP address and user-agent used for authentication and security.

2. How we use information

• Provide and operate the Service: collect and organize your Instagram comments and messages.
• Analyze content with AI to categorize intent, sentiment and urgency, surface sales leads, and build a product-feedback backlog.
• Let you reply to, hide or delete comments and send direct messages through the Service when you choose to.
• Provide analytics, reports and summaries.
• Process subscriptions and enforce plan limits.
• Provide customer support and respond to your requests.
• Maintain security, prevent abuse, and comply with legal obligations.

3. AI processing

To categorize and summarize comments and messages, relevant text content is sent to our AI provider, OpenAI, for processing. This content is used only to generate the analysis you see in the Service. We do not use your data to train our own models, and our AI provider processes it as a data processor on our behalf.

4. Instagram / Meta data

Our use and transfer of information received from the Instagram and Meta APIs adheres to the Meta Platform Terms and Developer Policies, including applicable limited-use requirements. Specifically:

• We access Instagram data only with your explicit authorization through Instagram's official login.
• Access tokens are stored encrypted at rest and are used only to provide features you use.
• You can disconnect your Instagram account at any time from the dashboard, which stops further access.
• We do not sell Instagram data, and we do not use it for advertising or for any purpose unrelated to the Service.

5. How we share information

We do not sell your personal information. We share it only with service providers ("sub-processors") that help us operate the Service, and only as needed:

We may also disclose information if required by law, to protect our rights, or in connection with a business transfer, subject to this Policy.

6. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. Collected Instagram content is retained to power your dashboard, analytics and history. When you disconnect an Instagram account or delete your Baxii account, we delete or anonymize the associated data within a reasonable period, except where we must retain limited records to comply with legal, accounting or security obligations.

7. Your rights & data deletion

You may access, correct, export or delete your information. Specifically, you can:

• Disconnect Instagram at any time from the dashboard to stop data access and remove the stored token.
• Delete your account and data by emailing us at the address below; we will remove your account, connected-account data and collected content.
• Request a copy of your personal data, or ask us to correct inaccuracies.

To request deletion or exercise any right, contact privacy@baxii.ai. You may also remove Baxii's access from your Instagram account settings under Apps and Websites.

8. Security

We protect your data using industry-standard measures: encryption in transit (HTTPS/TLS), encryption at rest for sensitive credentials such as access tokens, hashed passwords, access controls and role-based permissions within team workspaces. No method of transmission or storage is 100% secure, but we work to protect your information and continuously improve our safeguards.

9. Cookies & sessions

We use a strictly necessary session cookie to keep you signed in. We do not use third-party advertising cookies. Some features store small preferences in your browser's local storage (for example, your support-chat session).

10. Children

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under the age required to hold an Instagram professional account in their jurisdiction.

11. International transfers

Your information may be processed in countries other than your own, including where our service providers operate. Where required, we rely on appropriate safeguards for such transfers.

12. Changes to this Policy

We may update this Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

13. Contact us