Privacy Policy

Data Controller

Veflat Creator is operated by Veflat SAS, NIT 901475872, located in Medellín, Colombia. Privacy contact: info@veflat.com.

Data We Collect

• Veflat account credentials: full name, email, and securely hashed passwords (never stored in plaintext).
• Instagram data authorized via official OAuth login: username, posts, active stories, comments, and direct messages that trigger your automations.
• Contact data generated by automations: account identifiers, conversation history, and emails submitted by users when Email Gate is configured.
• Link click telemetry: timestamp, approximate country, and city. Raw IP addresses are used solely for coarse geo-resolution and are never persisted.
• Billing information managed by payment gateways (Mercado Pago, Wompi, PayPal). No credit card numbers stored on our servers.

How We Access Instagram

We access Instagram strictly through Meta's Official Graph API using OAuth 2.0. We never request or store your Instagram account password. Access tokens are encrypted at rest with AES-256 and can be revoked at any time.

How We Use Data

• Dispatch automated direct messages and display analytics (clicks, leads, delivery metrics).
• Maintain, secure, and improve platform operations and manage subscriptions.
• Comply with applicable legal obligations.

We never sell your data or your contacts' information.

Third-Party Processors

We share minimal necessary data with trusted infrastructure providers: Meta Platforms (Instagram Graph API), payment gateways (Mercado Pago, Wompi, PayPal), Cloudflare (security and CDN), and our hosting providers.

Data Retention

Data is retained while your account remains active and as required by Colombian statutory retention regulations (tax and accounting logs).

Your Rights

You may request access, correction, or deletion of your personal data by writing to info@veflat.com.

Data Deletion Instructions

You may request deletion of your Veflat Creator account and data at any time:

• Revoke access via Instagram: Settings > Apps and Websites > Veflat Creator > Remove.
• Email info@veflat.com with the subject line "Data Deletion" from your registered email address or specifying your Instagram handle.

We process account and token deletion within a maximum of 15 business days and provide email confirmation.

Policy Updates

Any updates to this policy will be posted on this page with an updated revision date.