Privacy Policy
Last updated: July 29, 2026
1. Introduction
Cacto ("we", "our", or "us") operates the website https://cacto.cc and associated Instagram direct message automation services. We are committed to protecting your personal information and respecting your privacy in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and Meta Developer Platform Policies.
2. Information We Collect
We collect information you provide directly to us when using our services:
- Account & Contact Information: Email addresses provided during waitlist registration or account creation.
- Instagram Platform Data: Account ID, handle, public comments, and webhook event payloads received through authorized Meta OAuth permissions.
- Usage & Analytics Data: Anonymized browser information, device type, and feature interaction metrics.
3. How We Use Your Information
We use collected data solely to:
- Trigger automated direct message link deliveries upon receiving matching Instagram keyword comments.
- Monitor API rate limit compliance and prevent spam flags via dynamic comment reply rotators.
- Send critical system notifications and product updates.
4. Data Protection & Meta API Security
Cacto accesses Meta Graph API endpoints strictly using OAuth 2.0 authorized user access tokens. Access tokens and sensitive account credentials are encrypted at rest and in transit. We do not sell, rent, or trade your personal data to third parties.
5. Your Rights & Data Deletion Requests
You have the right to access, rectify, or request deletion of your personal data at any time. To submit a data deletion request, visit our Data Deletion Request Page or email us at support@cacto.cc.
6. Contact Us
If you have any questions regarding this Privacy Policy, please contact us at support@cacto.cc.