Contents
1. Overview
EIGHTGATE ("we," "our," or "us") operates AI-powered automation agents for social media management. This Privacy Policy describes how we collect, use, store, and protect information obtained through our services, including connections to Instagram, Threads, and TikTok accounts via official API integrations.
By connecting your social media accounts to our service, you agree to the collection and use of information as described in this policy.
2. Information We Collect
2.1 Account Information
When you authorize EIGHTGATE to connect to your social media accounts, we receive and store:
- Your platform user ID (Instagram IGSID, TikTok Open ID)
- Your username and display name
- Account profile metadata (follower count, biography — where granted by permissions)
- OAuth access tokens required to operate the service on your behalf
2.2 Content and Messages
To operate the AI agent, we access the following content on your behalf:
- Instagram: Direct messages (DMs), comments on your posts, media metadata (photos, Reels, Stories)
- Threads: Posts, replies, and comments on your Threads account
- TikTok: Video metadata required for publishing content
This content is processed in real time to generate responses or perform actions as configured by you. We do not retain the raw content of private messages beyond the immediate processing window unless you explicitly configure storage.
2.3 Usage Data
We collect standard operational logs including:
- Timestamps of API operations performed
- Error logs and API response codes
- Agent activity summaries
These logs are used for service reliability and do not contain the content of your messages.
2.4 Information You Provide
When setting up your AI agent, you may provide:
- Agent configuration (name, persona, response guidelines)
- Contact information for account management
3. How We Use Your Information
We use the information collected exclusively to:
- Operate your AI agent — responding to messages, publishing content, engaging with your audience
- Authenticate API requests to Instagram, Threads, and TikTok on your behalf
- Monitor service health and troubleshoot issues
- Notify you of important service changes or token expiration
We do not use your data for advertising, profiling, or any purpose other than operating the service you requested.
4. Third-Party Services
Our service interacts with the following third-party platforms:
4.1 Meta Platforms (Instagram and Threads)
We use the Meta Graph API to access Instagram and Threads on your behalf. Data processed through this integration is subject to Meta's Privacy Policy. We request only the minimum permissions necessary: instagram_business_basic, instagram_business_manage_messages, instagram_business_manage_comments, instagram_business_content_publish, and equivalent Threads scopes.
4.2 TikTok
We use the TikTok API for content publishing. Data processed is subject to TikTok's Privacy Policy. We request only the minimum required publishing scopes.
4.3 No Data Sales
We do not sell, rent, or share your personal data or social media content with any third party other than the platform APIs listed above, which are required to operate the service.
5. Data Storage and Security
Your data is stored on dedicated servers within the European Union. We implement the following security measures:
- OAuth tokens are stored encrypted at rest and never exposed in plain text
- All data in transit is encrypted using TLS 1.2 or higher
- Access to production systems is restricted to authorized personnel only
- Agent instances are isolated — data from one client is never accessible to another
6. Data Retention
We retain your data for as long as your AI agent is active. Specifically:
- OAuth tokens — retained until you revoke access or delete your agent
- Operational logs — retained for 30 days, then automatically deleted
- Configuration data (agent name, persona) — retained until your agent is deleted
Upon deletion of your agent, all associated data is permanently removed from our systems within 30 days.
You can also revoke our access to your accounts at any time via each platform's app settings:
- Instagram / Threads: Settings → Security → Apps and Websites
- TikTok: Settings and Privacy → Security → Authorized Apps
7. Your Rights
Depending on your jurisdiction, you have the right to:
- Access — request a copy of the data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your data ("right to be forgotten")
- Portability — receive your data in a structured, machine-readable format
- Objection — object to certain processing activities
- Revocation — withdraw consent at any time without affecting prior lawful processing
To exercise any of these rights, contact us at eightgatecopr@gmail.com.
8. Children's Privacy
Our services are not directed to individuals under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will provide more prominent notice. Your continued use of our services after changes take effect constitutes acceptance of the revised policy.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: eightgatecopr@gmail.com
- Website: eightgate.ai
- Service URL: social.eightgate.ai