Last updated: [Effective date]
This Privacy Policy explains how [Legal entity name] (“Chanis”, “we”, “us”) collects, uses, shares and protects personal information when you use the Chanis website, the seller dashboard, and the online storefronts we host on behalf of our sellers (together, the “Service”). By using the Service you agree to this Policy.
Chanis is a software platform that lets a business owner (“Seller”) connect their own Instagram account, import their posts as products, and run a hosted online store. For a Seller’s account data we act as a data controller. For the shoppers (“Buyers”) who place orders on a Seller’s storefront, we generally process that information as a processor on behalf of the Seller, who is the controller of their own customer data.
When you connect Instagram, we request the instagram_business_basic permission, which lets us read your own profile and media. We use this solely to import your posts as products and to brand your store. We do not post on your behalf, access other users’ data, or use your data for advertising. Our use of information received from the Meta/Instagram APIs follows the Meta Platform Terms and applicable Developer Policies.
You stay in control: you can disconnect Instagram in your dashboard at any time, or remove Chanis from your Instagram “Apps and websites” settings. Both revoke our access. See Data Deletion for how to remove imported data.
To turn posts into useful products, the captions and images you import may be processed by third-party AI providers (such as Google) to suggest product titles, descriptions and categories and to detect non-product (“branding”) posts. This processing is performed to operate the Service; we do not authorise these providers to use your content to train their general models beyond what is necessary to return a result, and we send only the content needed for the feature.
We do not sell personal information. We share it only with service providers that help us run the Service, under appropriate contractual safeguards:
We may also disclose information where required by law, to enforce our terms, or in connection with a merger or acquisition.
We keep personal information for as long as your account is active or as needed to provide the Service, then delete or anonymise it, except where we must retain certain records (e.g. financial and tax records) to comply with the law. See Data Deletion for deletion requests and timelines.
We use strictly-necessary cookies to keep you signed in to the seller dashboard and to operate the storefront (for example, your shopping cart is stored locally in your browser). We do not use third-party advertising or cross-site tracking cookies.
We use industry-standard measures — including encryption in transit, encrypted storage of access tokens, and access controls — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.
Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal information, and to object to certain processing. You can exercise these rights in your dashboard, by disconnecting Instagram, by following Data Deletion, or by contacting us at [privacy@your-domain.com].
The Service is not directed to children, and we do not knowingly collect personal information from children under the age required by your local law.
We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice.
[Legal entity name]
[Registered business address]
[privacy@your-domain.com]
This document is a template tailored to Chanis’s data practices and is provided for convenience. It is not legal advice; please have it reviewed by qualified counsel and complete the bracketed details before publishing.