Privacy Policy

Eclipta - Instagram Content Scheduling Platform

Last Updated: December 31, 2025

1. Introduction

Welcome to Eclipta ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect your information when using our Instagram content scheduling platform ("Service").

We are committed to protecting your privacy and ensuring transparency about our data practices. By using Eclipta, you consent to the collection and use of information in accordance with this policy.

Contact Information:

Email: support@eclipta.my.id
Website: https://eclipta.my.id

2. Information We Collect

2.1 Information You Provide

Account Information:

Name and email address
Phone number (for OTP verification via WhatsApp)
Password (encrypted using industry-standard encryption)
Time zone preferences (WIB, WITA, WIT)

Instagram Account Information (via OAuth):

Instagram Username
Instagram User ID
Profile picture URL
Account type (Business or Creator)
Follower count (for internal dashboard display only and not permanently stored for historical tracking unless analytics features are enabled)

Content Data:

Post templates you create
Scheduled content (images, videos, captions)
Configuration and template settings

2.2 Automatically Collected Information

Usage Data:

Log data (IP address, browser type, access time)
Device information
Pages visited and features used
Error logs for troubleshooting

Cookies and Similar Technologies:

Session cookies for authentication
Preference cookies for user settings

2.3 Information from Third Parties

Instagram Platform API:

Basic profile information (username, profile picture)
Account type and status
We do NOT access follower lists, DMs, or other user data

External API Integrations (Optional):

Weather data from weather APIs
Exchange rate data from financial APIs
Other data sources you configure for templates

3. How We Use Your Information

We use the collected information to:

3.1 Provide and Maintain the Service

Create and manage your Eclipta account
Connect your Instagram Business/Creator account
Schedule and publish content to Instagram on your behalf
Process templates with real-time data from external APIs
Send notifications regarding scheduled posts

3.2 Instagram API Usage

instagram_business_basic Permission:

Retrieve your Instagram username and profile picture
Display which account is connected in your dashboard
Verify account type (Business or Creator)

instagram_business_content_publish Permission:

Create media containers for your scheduled posts
Publish content to your Instagram account at scheduled times
All content is created and approved by you before scheduling

3.3 Improve Our Service

Analyze usage patterns to improve features
Debug and fix technical issues
Develop new features based on user needs

3.4 Communication

Send service-related notifications
Respond to your inquiries and support requests
Send important updates regarding policy changes

4.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Service Providers

We may share information with trusted third-party service providers who assist us in operating the Service:

Cloud hosting providers (for data storage)
Email service providers (for notifications)
Analytics providers (for usage analysis)

All service providers are bound by confidentiality agreements and are prohibited from using your data for purposes other than providing services to us.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

Valid legal processes (court orders, subpoenas)
Government requests
Protection of our rights, privacy, safety, or property
Emergency situations involving potential threats to safety

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

5. Instagram Data Handling

5.1 Data We Access

Through the Instagram Platform API, we only access:

Your Instagram username and user ID
Your profile picture URL
Your account type (Business/Creator)
The ability to publish content on your behalf

5.2 Data We Do NOT Access

We do NOT access:

Your Instagram password
Your followers or following lists
Your Direct Messages (DMs)
Other users' data or content
Your Instagram Insights (unless you grant additional permissions)
Comments on your posts (unless you grant additional permissions)

5.3 Token Security

Access tokens are encrypted using AES-256 encryption
Tokens are stored securely in our database
Tokens are deleted immediately when you disconnect your account
We never share your tokens with third parties

5.4 Instagram Data Retention

Access tokens: Stored as long as your account is connected
Instagram profile data: Stored as long as your account is connected
Upon disconnection: All Instagram data is deleted within 24 hours

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

6.1 Technical Measures

SSL/TLS encryption for all data in transit
AES-256 encryption for sensitive data at rest
Secure password hashing using bcrypt
Regular security audits and vulnerability assessments
Firewall and intrusion detection systems

6.2 Organizational Measures

Access controls restricting data access to authorized personnel
Employee training on data protection
Incident response procedures
Regular backup and disaster recovery testing

6.3 Your Responsibility

Maintain the confidentiality of your account credentials
Use a strong and unique password
Log out from shared devices
Report suspicious activity immediately

7. Your Rights and Choices

7.1 Access and Portability

You have the right to:

Access your personal data
Request a copy of your data in a portable format
View what Instagram data we store

7.2 Correction

You can update or correct your account information at any time via dashboard settings.

7.3 Deletion

You have the right to:

Delete your Eclipta account
Request deletion of all your data
Disconnect your Instagram account (which removes all Instagram-related data)

To request data deletion, email us at support@eclipta.my.id or use the account deletion feature in your dashboard.

7.4 Disconnecting Instagram

You can disconnect your Instagram account at any time:

Go to Settings in your Eclipta dashboard
Click "Disconnect Instagram"
Confirm disconnection

Upon disconnection:

All scheduled posts are cancelled
Your access token is immediately deleted
All Instagram profile data is deleted
This action cannot be undone (you can reconnect later)

7.5 Opt-Out

You can opt-out of receiving:

Marketing communications (via unsubscribe link)
Non-essential cookies (via cookie settings)

8. Data Retention

We retain your data as long as necessary to provide our Service:

Data Type	Retention Period
Account information	Until account deletion
Instagram Tokens	Until disconnection
Scheduled content	90 days after publication
Upload history	1 year
Log data	90 days
Backup data	30 days after deletion

After the retention period, data is securely deleted or anonymized.

9. Data Storage

Your data is stored on servers located in Indonesia. We are committed to maintaining data security in accordance with applicable laws and regulations in Indonesia.

Eclipta is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately at support@eclipta.my.id.

11. Compliance with Indonesian PDP Law

Eclipta complies with Law Number 27 of 2022 on Personal Data Protection (UU PDP):

11.1 Basis for Data Processing

Consent: You provide consent when registering and connecting an Instagram account
Contract Fulfillment: Processing is necessary to provide the Service
Legitimate Interest: For security and service improvement

11.2 Your Rights Under PDP Law

Right to be informed about data processing
Right to access your personal data
Right to correct inaccurate data
Right to delete personal data
Right to withdraw consent
Right to object
Right to seek compensation for violations

We only use the official Instagram Platform API
We respect Instagram rate limits
We do not facilitate spam or automated abuse
We give users full control over their content
We cooperate with Meta compliance requirements
We implement data deletion callbacks as required

13. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of such third parties. We advise you to read their privacy policies.

14. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of changes by:

Posting the new Privacy Policy on this page
Updating the "Last Updated" date
Sending an email notification for significant changes

Continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: support@eclipta.my.id
Website: https://eclipta.my.id

Response Time: We strive to respond to all inquiries within 3 business days.

16. Data Deletion Requests

To request deletion of your data:

Via Dashboard: Go to Settings → Delete Account
Via Email: Send a request to support@eclipta.my.id with the subject "Data Deletion Request"
Include: Your registered email address and reason for deletion (optional)

We will process your request within 30 days and confirm deletion via email.

In accordance with Meta's policy, you can monitor the status of your data deletion request via the confirmation URL we provide at https://eclipta.my.id/data-deletion-status.

This Privacy Policy is effective as of December 31, 2025.