Meta App Privacy Policy

This policy applies to Meta Platform Data processed through the JEMM Meta app. The integration supports Instagram Direct messaging, comment management, and the related customer and order context used by authorized JEMM staff.

The data controller is ФОП Роїк Олександр Миколайович, tax ID 3255220072, registered address: м. Чернівці, вул. Руська, 219Е, operating under the JEMM brand.

Privacy requests can be sent to support@jemm.com.ua.

• connected Instagram business account identifiers, names, usernames, and profile information;
• Instagram user identifiers, names, and usernames for people who message or comment;
• message and comment content, timestamps, attachments, and conversation metadata;
• message reactions, read states, delivery states, and reply context;
• media identifiers, permalinks, captions, and media types used to display comment context;
• access tokens and technical identifiers required to maintain connected business accounts.

• provide a human-operated inbox for Instagram Direct messages and comments;
• allow authorized staff to respond from the appropriate JEMM business account;
• retain conversation history and connect it with customer-support and order context;
• maintain webhook delivery, synchronization, security, reliability, and troubleshooting.

We do not sell Platform Data or use it for unrelated advertising.

JEMM uses service providers that process data only on our behalf:

• OVHcloud for PostgreSQL database and server hosting in the European Union;
• Cloudflare for application delivery, security, and media storage on its global infrastructure;
• Meta for the Instagram platform, APIs, webhooks, and messaging delivery.

Platform Data is retained only while it is needed for customer support, order context, security, and operation of the integration. Connected-account tokens are retained until the account is disconnected, access is revoked, or the integration no longer needs them.

Some records may be retained longer when they are part of commercial history or when retention is required for legal obligations, fraud prevention, or dispute resolution.

Access to the internal CRM is limited to authorized staff. JEMM uses encrypted transport, restricted service permissions, operational logging, and restricted access to integration credentials.

You may request access, correction, or deletion of your personal data by emailing support@jemm.com.ua. We may ask for enough information to verify the request and protect other people’s data.

A connected Instagram business account can also be disconnected from the JEMM CRM. Requests are completed where applicable, except for records that JEMM must retain for a valid legal or commercial reason.

Data deletion callback: jemm.com.ua/api/auth/facebook/deletion

Deauthorization callback: jemm.com.ua/api/auth/facebook/deauth

This policy may be updated when the integration, processors, or applicable requirements change. The current version is always published on this page.

Last updated: September 3, 2026.