← Back to Home
Privacy Policy
Last Updated: December 20, 2025
1. Introduction
Welcome to XStellar Systems ("we," "our," or "us"). We operate xstellar.systems and provide AI-powered Instagram direct message lead qualification services (the "Service").
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: When you register for our Service, we collect your name, email address, business name, and payment information.
- Instagram Business Account Data: When you connect your Instagram Business Account, we collect your Instagram User ID, access tokens, and business account information.
2.2 Information We Collect Automatically
- Instagram Direct Messages: We collect and process direct messages sent to your connected Instagram Business Account for the purpose of lead qualification and scoring.
- Message Metadata: Including sender information, message timestamps, and engagement data.
- Usage Data: Information about how you interact with our Service, including log data, device information, and analytics.
2.3 Information From Third Parties
- Meta/Instagram: We receive data from Meta's Instagram platform through their official APIs, including message content, user profiles (to the extent permitted by Meta), and engagement metrics.
3. How We Use Your Information
We use the information we collect to:
- Provide and Maintain the Service: Process Instagram direct messages, qualify leads using AI analysis, and deliver scored results to you.
- Improve Our Service: Analyze usage patterns to enhance our AI models and Service functionality.
- Communication: Send you service-related notifications, updates, and support responses.
- Compliance: Comply with legal obligations and enforce our Terms of Service.
- Business Operations: Process payments, prevent fraud, and maintain security.
4. AI Processing and Lead Scoring
Our Service uses artificial intelligence (specifically, Claude AI by Anthropic) to:
- Analyze incoming Instagram direct messages
- Score leads based on relevance and quality (A/B/C classification)
- Extract key information from messages
Data sent to AI processors: Message content and metadata are transmitted to Anthropic's Claude API for analysis. Anthropic processes this data according to their privacy policy and does not use it to train AI models.
5. How We Share Your Information
We do not sell your personal information. We may share information in the following circumstances:
5.1 Service Providers
- AI Processing: Anthropic (Claude API) for message analysis
- Data Storage: Airtable for lead database management
- Notifications: Slack for real-time notifications
- Payment Processing: Payment processors for subscription billing
- Hosting Providers: Cloud infrastructure providers for service hosting
5.2 Legal Requirements
We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
6. Data Retention
- Instagram Messages: We retain processed messages for 90 days, after which they are automatically deleted unless required for legal compliance.
- Lead Data: Stored in your Airtable workspace indefinitely or until you request deletion.
- Account Information: Retained for the duration of your subscription and for 1 year after account closure for legal and accounting purposes.
7. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit (SSL/TLS)
- Secure storage of access tokens and credentials
- Regular security audits and updates
- Access controls and authentication measures
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
8. Your Rights and Choices
Depending on your location, you may have the following rights:
8.1 Access and Portability
You can request a copy of your personal data in a structured, commonly used format.
8.2 Correction
You can update or correct inaccurate information through your account settings or by contacting us.
8.3 Deletion
You can request deletion of your personal data. See our Data Deletion Policy for details.
8.4 Objection and Restriction
You can object to or request restriction of certain processing activities.
8.5 Withdraw Consent
Where processing is based on consent, you can withdraw consent at any time.
To exercise these rights, contact us at support@xstellar.systems.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
10. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. Third-Party Links and Services
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
12. Instagram Platform Policy Compliance
We comply with Meta's Platform Terms and Instagram's Platform Policy. Our use of Instagram data is limited to providing our lead qualification service and is not used for any other purpose without explicit consent.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on our website and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us:
XStellar Systems
Email: support@xstellar.systems
Website: https://xstellar.systems
15. Jurisdiction-Specific Provisions
15.1 For European Users (GDPR)
- Legal Basis: We process your data based on contract performance, legitimate interests, and consent where required.
- Data Protection Officer: For GDPR-related inquiries, contact support@xstellar.systems
- Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.
15.2 For Indian Users
We comply with the Information Technology Act, 2000 and applicable rules, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
15.3 For California Users (CCPA)
- We do not sell personal information
- You have the right to request disclosure of data collection and sharing practices
- You have the right to request deletion of personal information
- You have the right to opt-out of the sale of personal information (not applicable as we don't sell data)
By using our Service, you acknowledge that you have read and understood this Privacy Policy.