Instagram inbox privacy policy

Information we receive

When a conversation is delivered through Meta's Instagram API, the inbox can receive and store:

• Instagram account identifiers, and profile names and usernames when Meta makes them available.
• Messages sent to the theatre, our replies, and personal details you choose to include in those messages.
• Message identifiers, sender and recipient identifiers, timestamps, and delivery status.
• Attachment types and links supplied by Instagram, such as links to images, videos, or files included in a message.

The connection also stores the theatre account's access credentials so it can receive messages and send replies. These credentials are encrypted before storage.

How we use the information

We use conversation information to read and answer enquiries, arrange theatre services, keep a record of the conversation, and investigate message delivery problems. We also use identifying details to locate a conversation when handling a privacy request.

The current inbox does not automatically add people to a newsletter or send message content to an AI reply service. Replies are written and sent by the theatre administrator.

Access and service providers

Access to the stored inbox requires sign-in by the authorized theatre administrator. Instagram messages in this inbox are not displayed on the public theatre website.

Meta provides the Instagram account and messaging services. Our website's hosting, storage, and sign-in providers, including OpenAI Sites and Cloudflare, process information as needed to operate the inbox and protect access to it. Email sent about a privacy request is also handled by the email services used by you and the theatre.

These providers operate their own services under their own terms and privacy policies. This policy describes the theatre's inbox connection and how we handle its stored information.

Storage and retention

Conversation records remain in the inbox until they are removed. The current inbox has no automatic expiry period for stored messages; you can request deletion using the steps below.

We use administrator access controls to restrict access to conversations and encryption to protect the stored connection credentials. Removing the app's authorization in Instagram affects future access; deletion of information already stored in the theatre inbox is a separate request.

Visiting this website

The website records basic visit information, including the page path, visit time, referral source, and a randomly generated browser identifier saved in local storage. Hosting services also process request information such as IP addresses and browser details to deliver and operate the website.

If you use the website's contact form or chat form, the theatre receives the details you enter so it can respond. You can remove the locally stored browser identifier through your browser's site-data settings.

Changes and contact

We will update this page when the inbox's data handling changes and revise the date at the top. Questions about this policy or your inbox data can be sent to the theatre at: