This page explains what information Magic Super Manager processes to provide its social-media content management services and how that information is protected.
1. Information We Process
Depending on how you use the service, we may process account information such as name, email and profile details, connected social-account information, authentication and publishing data, uploaded media, panel settings, and technical logs required for security and troubleshooting.
2. Sign in with Google
If you choose Google sign-in, we only receive the information shown on Google’s consent screen that is needed for authentication, such as your account identifier, verified email address and basic profile information. We use it to identify the user and create a secure panel session.
3. Instagram Connection
When you connect Instagram, the connection permissions and identifiers required for the features you enable—such as account management and content publishing—are processed. These permissions are used only to provide the related panel functionality.
4. How We Use Information
Information is used for account access and security, profile management, social-account connections, content storage and scheduling, publishing, troubleshooting, abuse prevention, and service reliability.
5. Storage and Security
Appropriate access controls and safeguards are used for sensitive information. Data is retained only for as long as necessary to provide the service, maintain security, meet operational requirements, or comply with applicable obligations.
6. Sharing with Third Parties
We do not sell your information. Service providers for infrastructure, authentication or social-platform functionality may process the minimum information necessary to perform the feature you request.
7. Access, Correction and Deletion
You may request access, correction or deletion of your account information through the support channels or relevant controls inside the panel. Some technical records may be retained for a limited period for security, event logging or legal requirements.
8. Changes to this Policy
If our data-processing practices materially change, an updated version of this page will be published.
9. Contact
For privacy questions or account-data requests, use the Contact section in Magic Super Manager.
Instagram / Meta platform data
For Instagram Business or Creator accounts connected with authorization, we may process professional profile identifiers, usernames, profile information, connected-account authorization tokens, media and publishing details, available insights, comments and replies, and direct messages or story replies. Automation and contact-management features can store interaction history and associated contact information within the account owner’s workspace. Access depends on the permissions granted and features used.
Purposes and feature-controlled AI processing
We use connected-platform information to display accounts and analytics, manage content and publishing, deliver inbox and comment features, execute owner-configured automations, support customer conversations and maintain security. When an account owner enables an AI-dependent feature, relevant prompts, message context or media may be sent to a service provider needed to carry out that feature; not every Instagram interaction is sent to AI services. AI processing and any external providers must be assessed according to the actual enabled configuration.
Processors, security and retention
Hosting, network, storage, authentication and selected AI service providers may process the data required to deliver their respective functions. We do not sell Instagram platform data. We use access restrictions and protective controls for connected credentials and account information. Data can remain in operational records, backups or security logs for periods needed to provide services, investigate incidents or meet legal requirements; no universal automatic deletion period is asserted here.
Deletion, disconnection and your choices
Users may disconnect Instagram and request access, correction or deletion of personal information. Disconnecting authorization does not automatically erase every saved contact, message or CRM record. The public Data Deletion Instructions explain the request and verification process, including Meta-initiated requests.