Effective date: March 25, 2026
This Privacy Policy explains how CarmelTech LLC ("AppsCT," "we," "us," or "our") collects, uses, stores, and shares personal information when you use our services, including:
This policy is written for Wix site owners who install and use our apps. If you are a visitor to a Wix site that uses one of our apps, please see the Site Visitors section below.
This policy describes how we handle your information. By using our services, you acknowledge that you have read and understood this policy.
Contents: 1. What We Collect · 2. Instagram & Meta Data · 3. How We Use Your Information · 4. Third-Party Service Providers · 5. AI Tools & Internal Analytics · 6. Cookies & Tracking · 7. Site Visitors · 8. When We Share Your Information · 9. Data Retention & Deletion · 10. Data Security · 11. International Data Transfers · 12. Your Rights · 13. US State Privacy Rights · 14. EEA, UK, Switzerland & Canada · 15. Children's Privacy · 16. Changes to This Policy · 17. Contact Us · 18. Governing Language
When you connect an Instagram account through our app, we access the following data via the Instagram Graph API:
To maintain this connection, we store an OAuth access token issued by Meta. This token is periodically refreshed to keep the integration active. Tokens are stored securely and are never exposed to the frontend or to third parties.
We do not access your Instagram direct messages, stories, ad insights, audience demographics, or any data from accounts you do not explicitly connect.
We use the information we collect to:
We use third-party services to operate and improve our products. These providers process data on our behalf under contractual obligations to protect your information. The categories of providers we use include:
We do not share your data with ad networks, affiliate marketing programs, retargeting platforms, or data brokers.
We use third-party artificial intelligence services internally for the following purposes:
What data may be sent to AI providers: Account metadata, widget configuration data, usage analytics, and error reports. We do not send OAuth tokens, passwords, or payment information to AI providers.
How AI providers handle your data: We select AI providers that offer data processing agreements and commit to not using input data to train their models. Data sent to AI providers is used solely to provide their service to us and is not retained beyond what is necessary to process our request.
AI is not a user-facing feature in any of our products. We do not use AI to make automated decisions that produce legal or similarly significant effects on you.
When you use our app dashboard or settings panel as a site owner, we use cookies and similar technologies for the following purposes:
| Type | Purpose | Duration |
|---|---|---|
| Authentication | Keep you signed in to your account (session cookies set by our authentication provider). | Session / up to 30 days |
| Analytics | Understand how our app is used (e.g., page views, feature usage). Provided by third-party analytics services. | Up to 2 years |
| Preferences | Remember your settings and configuration choices. | Persistent |
We do not use cookies for advertising, retargeting, or cross-site tracking. These cookies apply only to site owners using our app — we do not set cookies on your site visitors' devices (see Section 7).
You can control cookies through your browser settings. Disabling cookies may affect your ability to use parts of our services. Most browsers allow you to block or delete cookies — consult your browser's help documentation for instructions.
If you are a visitor to a Wix website that displays an Instagram feed powered by our app:
We do not sell your personal information. We may share your information in the following circumstances:
We retain your personal information for as long as your account is active and you use our services. Specific retention periods:
To request deletion of your data at any time, contact us at [email protected]. We will process deletion requests within 30 days.
We may retain certain information beyond these periods where required by law (e.g., tax or accounting obligations), to resolve disputes, or to enforce our agreements. In such cases, we will retain only the minimum data necessary and delete it once the legal basis for retention no longer applies.
We implement reasonable technical and organizational measures to protect your information, including:
No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
We are based in the United States. Your information may be processed and stored in the US and other countries where our service providers operate.
Our third-party service providers (including cloud infrastructure and analytics platforms) maintain their own compliance mechanisms for international data transfers, such as Standard Contractual Clauses (SCCs) and other safeguards recognized under applicable data protection laws.
By using our services, you acknowledge that your information may be transferred to and processed in jurisdictions outside your own.
Depending on where you are located, you may have the right to:
To exercise any of these rights, email us at [email protected]. We will respond in accordance with applicable law.
If you are a resident of California, Colorado, Connecticut, Virginia, or another US state with a consumer privacy law, you may have additional rights, including:
We have not disclosed personal information to third parties for their direct marketing purposes in the preceding calendar year.
There is no uniform standard for responding to Do Not Track (DNT) browser signals. We do not currently respond to DNT signals.
| Category | Collected |
|---|---|
| Identifiers (name, email, username, IP address) | Yes |
| Internet/network activity (usage logs, browser info) | Yes |
| Geolocation (approximate, IP-based only) | Yes |
| Commercial information | No |
| Biometric information | No |
| Sensitive personal information | No |
| Professional/employment information | No |
| Education information | No |
To exercise your rights, email [email protected]. You may designate an authorized agent to submit a request on your behalf. We may ask for verification of your identity before processing a request. If we decline a request, you may appeal by emailing the same address.
If you are located in the EEA, UK, or Switzerland, we rely on the following legal bases:
In addition to the rights listed in Section 12, you may:
If you are located in Canada, we process your information based on your express or implied consent. You may withdraw consent at any time by contacting us. In limited circumstances, we may process information without consent as permitted by Canadian privacy law.
Our services are not directed to anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at [email protected] and we will delete it.
We may update this Privacy Policy from time to time. The updated version will be indicated by a revised effective date at the top of this page. If we make material changes, we will notify you by email or by posting a prominent notice in our app.
If you have questions about this policy or want to exercise your privacy rights:
CarmelTech LLC
Email: [email protected]
Address: 18034 Ventura Blvd #2059, Encino, CA 91316, United States
This Privacy Policy is written in English. If there is any conflict between the English version and a translated version, the English version will prevail.