Privacy Policy for Bolta

Last Updated: 6-13-2025

Introduction

Welcome to Bolta, part of Bolta Platforms, Inc. We respect and protect your privacy. Our Privacy Policy outlines our practices concerning the handling of your information through our website, mobile applications, and other digital platforms (collectively, our "Services").

Consent

By using our Services, you accept the terms outlined in this Policy and consent to the collection, storage, use, and sharing of your information as described.

Information We Collect

Personal Information

Name, email address, mailing address, phone number, payment details (encrypted and securely processed), social media account information.

Non-Personal Information

Browser type and version, device specifics, operating system, IP address, web pages visited, access times, country of origin, authentication information, personal communications, website content and resources, form data, web browsing activity, user-generated content.

Instagram Business Data

When you connect your Instagram Business or Creator account to Bolta, we request the following permissions with your explicit consent:

  • instagram_business_basic - Access to basic profile information and media metadata
  • instagram_business_manage_messages - Access to direct messages for inbox management
  • instagram_business_content_publish - Permission to publish content on your behalf
  • instagram_business_manage_insights - Access to analytics and engagement metrics
  • instagram_business_manage_comments - Access to comments for moderation features

Specific Instagram Data We Collect:

  • Basic Profile & Media Metadata: Your Instagram business account ID and username, captions, URLs, timestamps, media IDs for your published posts and stories
  • Direct Messages: Incoming & outgoing message threads so you can view and reply in Bolta
  • Content Publishing Data: Ability to create, edit, and delete posts on your behalf, per your instructions
  • Comments Management: Comments on your posts and the ability to reply, hide, or delete them
  • Insights & Analytics: Engagement metrics (likes, impressions, reach, saves) for your posts and stories

We also store the Instagram access tokens, user IDs, and page IDs necessary to maintain the integration.

Cookies and Tracking Technologies

We use cookies and similar technologies to improve service functionality, remember preferences, and analyze service usage. You can manage these settings in your browser.

How We Use Your Information

Service Analysis and Improvement

Enhancing functionality and user experience, processing transactions securely, providing customer support and responding to requests, monitoring trends and usage to improve our services.

Instagram Integration

We process your Instagram Business Data strictly to deliver the following features, nothing more:

  • Post Scheduling & Publishing: Prepare, queue, and publish your media at times you choose
  • Inbox Management: Surface all your Instagram DMs in one place so you never miss a message
  • Comment Moderation: Let you respond to or remove comments without leaving Bolta
  • Analytics & Reports: Generate dashboards, weekly summaries, and performance insights

Important: At no point do we use your Instagram data for advertising, profiling, or any purpose unrelated to these features. We process Platform Data only as clearly described in this privacy policy and in accordance with all applicable laws, regulations, and Facebook/Instagram Platform Terms.

Security Measures

We encrypt sensitive data in transit and at rest using RSA encryption methods. Regular audits and access restrictions are in place to protect your information. We retain personal information for the necessary period to fulfill the purposes outlined in this Policy and comply with our legal obligations.

Data Retention and Deletion

We retain your personal information and Instagram Business Data only for as long as necessary to provide our Services and fulfill the purposes outlined in this Policy. You may request deletion of your data at any time by:

  • Accessing your account settings and removing connected accounts
  • Contacting us directly at support@bolta.ai
  • Using the data deletion tools available in your dashboard

Upon request, we will delete your Instagram Business Data within 30 days, except where retention is required by law.

Handling Personal And Sensitive User Data

All personal and sensitive data is transmitted securely over HTTPS. We do not use or transfer your data for advertising purposes. We strictly adhere to the guidelines for minimal data permissions and only collect data necessary for the functionalities provided. If our handling of personal or sensitive data is not directly related to a prominently described functionality, we will provide a clear, prominent disclosure before collection and obtain your affirmative consent.

Third-Party Disclosure

Service Providers

We engage third-party services that comply with strict data protection laws to assist in providing our Services. These services are bound by confidentiality agreements and do not have permission to use your information for any purposes outside of those specified in our contract.

Legal Requirements

We may disclose your information when legally required.

Platform Data Sharing

We do not share, sell, or transfer your Instagram Business Data to third parties except in the following limited circumstances:

  • To trusted service providers who process data on our behalf under strict confidentiality agreements
  • When required by law or to respond to legal process
  • To protect our rights, privacy, safety, or property
  • With your explicit consent

Google User Data

For users who connect their Google Drive accounts through our Google integration, we access your Google user data solely to provide the functionality of our application. We provide a secure file selection interface, and we download only the specific files you choose to import. We do not share, transfer, or disclose your Google user data to any third parties except in the following limited circumstances:

  • To our trusted service providers who process data on our behalf, subject to strict confidentiality agreements, including:
    • Supabase - for secure database storage and authentication services. We store file metadata (such as file IDs, names, and types), and copies of selected files that you choose to import into our application. These files are stored securely in Supabase storage to enable the functionality of our application.
  • When required by law or to respond to legal process
  • To protect our rights, privacy, safety or property
  • With your explicit consent

Important: We do not use Google user data obtained through Google APIs to develop, improve, or train generalized artificial intelligence (AI) or machine learning (ML) models. Any processing of your Google data is strictly limited to providing the specific functionality you have requested within our application.

Your Rights And Choices

Access, Correction, and Opt-Out

You may review, update, or delete your personal information through your account settings or by contacting us. You can opt out of non-essential communications by following unsubscribe instructions provided in such communications. For Instagram Business Data, you can:

  • Disconnect your Instagram account at any time through your account settings
  • Request access to all Instagram data we have collected about you
  • Request correction of any inaccurate Instagram data
  • Request deletion of your Instagram Business Data

Compliance with Platform Terms

This privacy policy is designed to comply with and does not supersede, modify, or conflict with Facebook and Instagram Platform Terms. We process Platform Data only in accordance with:

  • This Privacy Policy
  • Facebook Platform Terms and Policies
  • Instagram Platform Policy
  • All applicable laws and regulations

Changes To This Policy

We will notify you of any significant changes by updating the date at the top of this policy and, if necessary, through other communication methods. Continued use of our Services after policy changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns regarding your privacy, data deletion requests, or this policy, please contact us at:

Email: support@bolta.ai

Privacy Policy | Bolta