Hamava VoltageLearn what information Hamava Voltage collects, how Instagram interactions are processed, how information is secured, and how you can request deletion.
1. Scope and data controller
This policy covers hamavaelv.ir and Hamava Voltage digital services, including Instagram comment management and automated reply workflows officially operated by the company.
Hamava Voltage is responsible for processing under its control. Instagram, Facebook and Meta have separate policies and responsibilities for their platforms.
2. Information we may process
Depending on enabled features, granted permissions and user activity, we may process the following categories through authorized Meta interfaces. Not every category is collected for every user.
- Instagram comment text, comment IDs, connected business-account media or post IDs, and interaction timestamps.
- Instagram usernames, public or app-scoped user IDs, and accessible profile information only to the extent allowed by applicable Meta permissions.
- Direct-message content and conversation metadata only if messaging features are enabled and the conversation is initiated or otherwise permitted under Meta rules.
- Keywords, workflow state, sent replies, timestamps and technical errors for reliable execution, troubleshooting and duplicate prevention.
- Information voluntarily submitted through website forms, and limited technical information such as IP addresses, browser type and security logs.
3. How information is obtained
Instagram information is received through official Meta APIs, webhooks and granted permissions relating to the connected professional account. Receiving comment events does not provide unlimited access to private messages or credentials.
We do not ask people for their Instagram passwords. Account access must be granted and revoked through Meta's authorized flows.
4. Purposes of processing
We use relevant information to:
- Recognize eligible comments and deliver permitted public replies or automated messages according to configured rules and Meta policies.
- Handle service requests, maintain conversation context and escalate interactions to staff where appropriate.
- Prevent spam, abuse, duplicate messages and unauthorized access, and diagnose service failures.
- Prepare aggregated operational reports and improve service reliability within the authorized scope.
- We do not sell Meta-sourced personal data, build unrelated advertising profiles from it, or process it for unrelated purposes.
5. Legal basis and user choices
Depending on context and applicable law, processing may rely on a user's request, service delivery, valid consent or authorization, or legal obligations. Where consent is required, it may be withdrawn as provided by law.
Automated replies operate only for permitted interactions and account configurations. Revoking access or opting out may disable relevant features.
6. Access, service providers and transfers
Access is limited to authorized personnel and necessary providers of hosting, security, messaging infrastructure and workflow processing under appropriate confidentiality and security obligations.
Data exchanges with Meta occur only through permitted integrations. Disclosure may also be required by law. Infrastructure services may involve cross-border processing, subject to applicable requirements and Meta terms.
7. Security safeguards
Our service design and operation apply measures appropriate to the information involved, such as role-based access, encryption in transit, restricted token access, proportionate security logging and access reviews.
No digital service is entirely risk-free. Material incidents are investigated, contained and reported when required under applicable obligations.
8. Retention and deletion
We keep data only while reasonably needed to deliver the service, resolve incidents, ensure security, handle user requests or meet valid legal requirements. Data is deleted or irreversibly de-identified without undue delay when no longer needed, when a valid deletion request is received, when access ends, or when Meta requires deletion.
Restricted backups and records subject to legal retention may remain until their ordinary deletion cycle or applicable legal period, without being used for normal operations.
9. Your rights and requests
You may ask us to access, correct or delete information we control about you, or inquire about our practices. To protect other people, proportionate identity verification may be required before disclosure or deletion.
Use our Data Deletion page or email info@hamavaelv.ir. Never email passwords, login codes or access tokens.
10. Cookies, updates and contact
Our website may use essential technical or security cookies and, when configured, analytics tools. Analytics usage is subject to applicable settings and rules.
We update this page when processing practices change and display the revision date above. Contact our privacy team at info@hamavaelv.ir or +98 21 2687 6075.