Legal

Privacy Policy

Effective date: 10 October 2026 · Last updated: 11 October 2026

This policy explains what data Admino processes, including data we receive from Meta through Instagram Login and the Instagram API, why we process it, who we share it with, how long we keep it, and how you can have it deleted.

Short version. We use Instagram data only to provide the features the account owner sets up in Admino. We never sell Platform Data, never use it for advertising, and never share it with data brokers. You can delete your data at any time; see Data deletion instructions.

1. Who we are

Admino (admino.click) is a software service that helps businesses and creators manage their Instagram professional accounts: automatic replies to direct messages and comments, conversational forms and lead capture, a shared inbox, scheduled publishing, ice breakers and persistent menus, page performance reports, caption and subtitle tools, and selling and checkout. Admino is available as a web panel at app.admino.click and as Android and iOS apps.

Admino is operated by CreativeQuants Agency (“Admino”, “we”, “us”), which is the data controller for the personal data described in this policy, except where Section 2 says otherwise. You can reach us using the details in Contact us.

2. Scope and roles

This policy covers the Admino web panel, the Admino mobile apps, our websites, and the data we receive from Meta Platforms (“Platform Data”) when an account owner connects an Instagram professional account using Instagram Login.

Account owners are the businesses and creators who sign up for Admino and connect their Instagram accounts. For their account data, Admino is the controller.
People who interact with a connected account (for example, someone who sends a direct message or comments on a post) are the account owner’s customers and audience. Admino processes their messages and comments on behalf of, and on the instructions of, the account owner, who decides which features to enable. If you are one of these people, you may contact the business directly or contact us; Section 10 explains how we handle your request.

3. Data we collect

3.1 Data we receive from Instagram (Platform Data)

When an account owner connects an Instagram professional account, they approve these permissions on Instagram’s own screen: instagram_business_basic, instagram_business_manage_messages, instagram_business_manage_comments, instagram_business_content_publish and instagram_business_manage_insights. We also subscribe to Instagram’s message and comment notifications for the connected account. We never ask for or receive an Instagram password.

Category	What it includes	Why we need it
Connected account profile	Instagram account ID, username, name, profile picture, biography and website, account type, and follower, following and media counts. We keep our own copy of the profile picture so it keeps displaying after Instagram’s link expires.	To identify and display the connected account in Admino, and to tailor features to it.
Access token	The access token Instagram issues when the account owner connects, and its expiry date.	To call the Instagram API on the account owner’s behalf. It is stored only on our servers and is never sent to browsers or apps.
Direct messages	Messages sent to and from the connected account: the sender’s Instagram-scoped ID, text, attachments, story replies and references, button and quick-reply taps, and timestamps. For people who message the account, their username, name and profile picture as made available by Instagram.	To show conversations in the inbox, to match and send the automatic replies and forms the account owner configured, and to let the account owner reply.
Comments	Comments on the connected account’s posts: comment ID, text, commenter’s ID and username, the post it belongs to, and timestamps.	To send the comment replies and private replies the account owner configured, and to avoid replying to the same comment twice.
Follower status	Whether a person who messaged the account follows it.	Only for replies the account owner restricted to followers (or to non-followers).
Media and captions	The account’s posts, reels and stories: media type, captions, permalinks, thumbnails and timestamps, and the media and captions the account owner publishes through Admino.	To schedule and publish content, let the account owner choose posts for automations, and show content in reports.
Insights	Account and post metrics such as reach, views, profile views, interactions, likes, comments, shares, saves, and follows and unfollows.	To show the account owner their page performance reports.
Messaging settings	The account’s ice breakers and persistent menu.	To let the account owner view and edit them.
Contact details in messages	Phone numbers and email addresses that people choose to write in messages, comments or form answers to the connected account.	To give the account owner a list of their own leads, which they can export or delete.

3.2 Data account owners give us

Account and sign-in data: phone number, optional email address, display name, password (stored only as a secure hash), and two-factor settings.
Workspace data: workspace name, team members and invitations, automation rules, reply messages, forms, product catalogues, shop settings, knowledge entries and other content the account owner creates.
Files: images, videos, audio, fonts and documents the account owner uploads, and audio from videos they submit for captions.
Billing data: plan, amounts, invoices and payment references. Card details are entered on the payment provider’s own page and never reach us.
Support data: messages and attachments sent to our support team.

3.3 Technical data

IP address, device and browser type, app version, sign-in sessions, push notification device tokens, usage counters (for example, messages sent against a plan’s limits), and technical logs and performance traces we use to keep the service running and secure.

4. How we use data

We use Platform Data only to provide, maintain and secure the features the account owner chooses to use, and for no other purpose. Specifically, we use data to:

run the automatic replies, forms, follow-ups, publishing schedules and other automations the account owner configures;
show the account owner their inbox, comments, leads, content and performance reports;
provide automated features that the account owner chooses to enable, such as automatic replies and content analysis. These features process message, comment and caption content solely to provide those features to that account owner. They are off until the account owner switches them on for a specific Instagram account;
send the account owner notifications about their account (for example, that a connection needs attention, or that a customer placed an order);
list connected professional accounts on our website as accounts that use Admino, as described in Section 6, unless the account owner turns this off;
enforce plan limits, prevent abuse, and keep the service secure;
provide customer support; and
comply with legal obligations.

We do not sell, license or rent Platform Data; use it for advertising, ad targeting or marketing to the people who interact with a connected account; combine it across different account owners; build profiles of individuals for purposes unrelated to the account owner’s use of Admino; or use it to train general-purpose models. Data from one workspace is never visible to another workspace.

5. Legal bases

Where data protection law (such as the GDPR or UK GDPR) requires a legal basis, we rely on:

Contract: to provide Admino to the account owner under our Terms of Service.
Consent: for connecting an Instagram account (which can be withdrawn by disconnecting or revoking access), for optional automated features, and for push notifications.
Legitimate interests: to secure the service, prevent fraud and abuse, and improve reliability, balanced against your rights.
Legal obligation: to keep financial records and respond to lawful requests.

For messages and comments from people who interact with a connected account, the account owner is responsible for having a legal basis for using Admino to process them; we process them only on the account owner’s instructions.

With the account owner and their team: data about a connected account is visible to the account owner and to the team members they invite to their workspace.
On our website: a connected Instagram professional account with more than 1,000 followers may be listed on admino.click as an account that uses Admino. The listing shows only part of what the account already shows publicly on Instagram: its username with the middle hidden (for example “fu•••rg”; the full username is never sent to visitors), its profile picture and a rounded follower count. It does not link to the account. Nothing about its messages, comments, customers, settings or plan is shown. The account owner can remove it at any time with the “Show my page on Admino’s website” switch in that account’s settings in the Admino panel or app; it then leaves the list within an hour.
With Meta: when Admino sends replies, publishes content or reads data on the account owner’s behalf, it does so through the Instagram API.
With service providers who process data on our behalf, as described in Section 7.
For legal reasons: when required by law, regulation or a valid legal process, or to protect the rights, safety and security of our users, the public or Admino. Where permitted, we will tell the affected account owner.
In a business transfer: if Admino is involved in a merger, acquisition or sale of assets, data may transfer under the same protections described in this policy, and we will give notice before it becomes subject to a different policy.

We never sell Platform Data and never share it with data brokers or advertising networks.

7. Service providers

We use carefully selected service providers (for example, hosting, storage, messaging and notification delivery, payment processing, monitoring and other technical processing) that process data on our behalf, only on our instructions, under confidentiality and data protection obligations, and never for their own purposes. These include providers for:

server hosting and network delivery of our websites and apps;
file and backup storage;
email, SMS and mobile push notification delivery;
technical processing that powers the optional automated features and caption tools the account owner enables;
performance monitoring and error tracing;
internal staff alerts and support tooling; and
payment processing (which does not involve Platform Data).

Each provider receives only the data needed for its task. Where they use sub-processors, they are bound by equivalent obligations. You can ask us for the current list of providers that process your data using the details in Contact us.

8. International transfers

Our main application servers are located in the United Kingdom. Data may also be processed in other countries where we or our service providers operate, which may be outside your own country. Where we transfer personal data internationally, we use appropriate safeguards, such as contractual commitments that require the recipient to protect the data to the standard described in this policy, and we transfer only what is needed for the purpose.

9. Retention

We keep data only for as long as needed to provide the service to the account owner, or as required by law. In particular:

Data	How long we keep it
Instagram access token	While the Instagram account is connected. It is replaced when it is refreshed and deleted when the account owner deletes their Admino account or asks us to delete the Instagram account’s data.
Profile picture copy	Refreshed at most every 7 days while the account is in use; deleted with the Instagram account’s data.
Messages, comments, leads, automations, published content and insights	While the account owner’s Admino account is active, so they can see their history and so automations work. The account owner can delete individual leads, form responses and files at any time.
Short-lived processing state	Automatically expires: form sessions after 30 minutes, follower confirmations after 24 hours, pending reply continuations after 7 days, and sign-in sessions after 7 days.
Disconnected Instagram account	Disconnecting stops all access and automation immediately. The account’s settings are kept so that reconnecting restores them, until the account owner deletes their Admino account or asks us to delete the data (see Section 10).
After a deletion request or account deletion	Removed from our live systems as soon as reasonably possible and in any case within 30 days.
Database backups	Daily backups are kept for 14 days and then deleted, so deleted data disappears from backups within 14 days of being removed from our live systems.
Billing and invoice records	As long as tax and accounting law requires. These records do not contain Platform Data.

We also delete Platform Data when we no longer need it for a legitimate business purpose, when we stop providing Admino, or when Meta or the law requires us to.

10. Data deletion instructions

You can ask us to delete your data at any time. Choose the option that fits you.

Option A: Delete your Admino account (account owners)

Open the Admino app on Android or iOS and sign in.
Go to Settings → Delete my account.
Request a verification code, enter it, and confirm.

Your account is deleted immediately. Your name, phone number and sign-in methods are erased, the Instagram accounts in the workspaces you own are deleted together with their access tokens, automations, replies, messages, leads, content and reports, and you are removed from any team you belong to. Remaining related records are removed within 30 days. Billing records are kept only as the law requires.

Option B: Ask us to delete your data

If you use the web panel, want to delete only one Instagram account’s data, or cannot use the app:

Contact us using any channel in Contact us, with the subject “Data deletion request”.
Tell us the Instagram username, and the phone number of your Admino account if you have one.
We will verify that the request comes from the account owner (for example, with a code sent to the account’s phone number) to protect you from fraudulent requests.
We will delete the data and confirm when it is done, within 30 days of verification.

Option C: You messaged or commented on a business that uses Admino

Contact us as described in Option B with your Instagram username and the business account you interacted with. We will delete your messages, comments and contact details held for that business within 30 days, and let the business know. You can also ask the business directly.

Disconnecting versus deleting

Disconnecting an Instagram account in the Admino panel (Accounts → Disconnect) or removing Admino in Instagram (Section 11) stops all access and automation straight away. It does not by itself erase the data already stored; use Option A or Option B for that.

11. Revoking access in Instagram

You can remove Admino’s access to your Instagram account at any time from Instagram itself:

In the Instagram app, go to your profile and open the menu.
Open Settings and activity → Website permissions → Apps and websites. You can also type “Apps and websites” in the settings search box.
Under Active, select Admino and tap Remove.

Once removed, Admino can no longer receive new data from your account or act on it. To have stored data deleted, follow Section 10.

12. Security

We protect data with measures appropriate to its sensitivity, including:

encrypted connections (TLS) between your device, our servers, Meta and our service providers;
access tokens kept only on our servers, never sent to browsers or apps, and excluded from API responses;
strict separation of each workspace’s data, with authorisation checks on every request;
an internal administration console reachable only over a private network, with two-factor authentication and role-based permissions for staff;
databases that are not exposed to the internet, rate limiting, and monitoring for abuse; and
daily backups stored off the server and kept for a limited time.

No system is completely secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as the law requires, and notify Meta where Platform Data is involved.

13. Your rights

Depending on where you live, you may have the right to:

access the personal data we hold about you and receive a copy;
correct inaccurate data;
delete your data (see Section 10);
restrict or object to certain processing;
receive your data in a portable format;
withdraw consent at any time, without affecting earlier processing; and
complain to your local data protection authority.

To exercise these rights, contact us. We will respond within 30 days and may need to verify your identity first. We do not charge for reasonable requests.

14. Children

Admino is a business tool and is not directed at children. Account owners must be at least 18 years old, or the age of majority where they live. We do not knowingly collect personal data from children under 13 (or the higher minimum age that applies where they live). If you believe a child has given us personal data, contact us and we will delete it.

15. Cookies

The Admino panel uses a strictly necessary cookie to keep you signed in, for up to 7 days. Our marketing website remembers your theme preference in your browser and may use aggregate analytics, which you can turn off from the link in the website footer. We do not use advertising cookies.

16. Changes to this policy

We may update this policy as Admino changes or the law requires. We will change the “Last updated” date at the top of this page, and for material changes we will notify account owners in the app or by message before the change takes effect. Earlier versions are available on request.

17. Contact us

For privacy questions, data requests or deletion requests, contact Admino (operated by CreativeQuants Agency):

Contact form: admino.click/en/contact
In-app support: the support button in the Admino panel and apps
WhatsApp: +98 990 402 8854
Phone: +98 990 402 8854

We aim to reply within 7 days and complete requests within 30 days.