Privacy Policy & Data Protection
Last Updated: September 2026 | Compliant with Meta Platform Terms
Data Minimization
We only collect data essential for instant invoicing and Instagram DM automation.
Zero Third-Party Sharing
User information is never rented, shared, or sold to data brokers or advertisers.
Right to Erasure
Automated Meta data deletion callbacks and real-time status tracking supported.
1 Introduction & Scope
DirectResan ("we", "our", or "us") operates the DirectResan Social Commerce and Automation Platform (directresan.com). We are committed to protecting the privacy of merchants and buyers who interact with our services via Instagram Direct Messages, automated checkout, and storefront catalog hubs. This policy outlines our compliance with Meta Platform Terms, Developer Policies, and GDPR standards.
2 Information We Collect
We only collect data strictly necessary to execute social commerce workflows:
- Merchant Account Credentials: Full name, email address, contact phone number, and encrypted password hash.
- Instagram & Meta API Data: Facebook Page ID, Instagram Business Account ID, user scopes granted via Meta OAuth (e.g.
instagram_basic,instagram_manage_messages,pages_manage_metadata), and incoming DM webhooks used strictly to dispatch automated product links and answer inquiries. - Buyer & Order Data: Shipping addresses, customer contact numbers, order items, and payment transaction reference numbers.
- Payment Verification Data: Transaction settlement alerts strictly to match trace numbers against pending orders.
3 How We Use Information
Collected data is used exclusively to:
4 Meta Platform Data Protection & Retention
In accordance with Meta Platform Terms, we do not sell, rent, or transfer Meta User Data to data brokers or third parties. All access tokens and customer communication logs are stored using industry-standard AES-256 encryption. We retain message logs only for the minimum period necessary for customer order fulfillment and analytics.
User Data Deletion Callback (Meta GDPR Compliance)
Users and merchants have the absolute right to request deletion of all data associated with their accounts at any time. In compliance with Meta Developer Requirements, we provide an automated Data Deletion Callback endpoint and a public status verification portal:
Contact Data Protection Officer
For inquiries regarding this Privacy Policy, GDPR rights, or Meta compliance verification, please contact our dedicated team at:
compliance@ddirectresan.com • legal@directresan.com