Modula-Instagram Privacy Policy

Effective Date: 12.09.2024

At WPChill, we respect your privacy and are committed to protecting it. This Privacy Policy explains how our WordPress plugin, Modula-Instagram, integrates with the Instagram API and handles user data during the OAuth process.

1. Overview of Plugin Functionality

Our WordPress plugin provides users with a “CONNECT TO INSTAGRAM” button, allowing them to authenticate their Instagram account and access media to create galleries on their website. The authentication process involves a secure OAuth flow to ensure privacy and data protection.

2. How the Authentication Process Works

When a user clicks the “CONNECT TO INSTAGRAM” button, they are redirected to one of our servers to start the OAuth flow. During this process:

  • We do not store any information about the user on our servers.
  • We complete the OAuth flow on behalf of the user and return the Instagram access token to the client’s website (the site where the plugin is installed).
  • The client’s website then stores this access token in its own database. This token is necessary to make API requests to Instagram on behalf of the user to retrieve media and other data allowed by Instagram’s API.

3. Data Storage and Security

We do not store the Instagram access token or any personal information on our servers. The access token is transmitted directly back to the client’s website, where it is securely stored within the client’s database.

The access token is used by the plugin solely for making authorized API requests to Instagram on the client’s behalf, such as retrieving media to be displayed on the user’s WordPress website.

Since all sensitive data is stored on the client’s WordPress site, we recommend that clients follow best practices for securing their website, including protecting their database and server infrastructure.

4. No Data Access or Sharing

We do not have access to the access token once it is returned to the client’s website.

We do not store, share, sell, or transfer any personal information or Instagram account data to any third parties.

The plugin acts as a simple conduit between Instagram’s API and the client’s WordPress site, enabling media retrieval without retaining any data ourselves.

5. Third-Party Services

Our plugin interacts with Instagram’s API to retrieve media. The handling of Instagram account information is governed by Instagram’s own privacy policy. We encourage users to review Instagram’s privacy practices:

Instagram’s Privacy Policy: https://help.instagram.com/155833707900388

6. Your Consent

By using our plugin, you consent to this Privacy Policy and the handling of your data as described herein.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted here with an updated “Effective Date.” Continued use of the plugin after any changes signifies your acceptance of the updated policy.