Privacy policy

This page describes the Avangard Booking application, including the Instagram connection used by the Meta app “Avangard Booking”. The app lets a business take appointments. Instagram is one way a customer can reach that business. It is not a second booking system, and an Instagram customer is not merged with a Telegram customer by name, username, phone, or a matching link.

Questions about this data: allivan2020@gmail.com. You can write in English, Ukrainian, or Russian.

What we receive

A business owner connects their own professional Instagram account (a business or creator account). A personal Instagram account is rejected and its token is not stored. The connection uses Instagram Login and the permissions to read the professional profile and to manage messages for that account.

For the connected professional account we store:

• the Instagram professional account id and username;
• the account type and the permissions that were granted;
• a long-lived access token, encrypted in the database, and the token expiry time.

When someone messages that account, we store the app-scoped sender id from the webhook, a preview of the latest message text (at most 500 characters), a message count, and the time of the message. We do not store the customer’s Instagram username as a separate field. The raw webhook body is not stored. For each delivery we keep a hash, a deduplication key, a result code, and the professional account id, so a repeated delivery is not treated as a new inquiry.

If the customer books through the link, the appointment stores the name, email, optional phone and notes they type, the service, the staff member, and the time. The appointment is marked as coming from Instagram. It is pay-at-visit. We do not create a Telegram user, a Telegram invoice, or a Telegram Stars payment for that customer. If the business requires Telegram Stars prepay and no Instagram payment method is available, the Instagram booking is refused before a time slot is offered.

Why

We use this data to show the business the inquiry, to send or prepare a booking link, and to create at most one appointment for that inquiry. The owner can see later visits from the same Instagram customer inside that business. A booking link lasts 72 hours. That is separate from Instagram’s 24-hour window for sending a direct message.

Who at the business can see it

Only people signed in to that business. The owner sees the Instagram connection, inquiries, and Instagram clients for their business. A staff member of the same business can see the inquiry list, including the message preview. The Instagram client list a staff member sees is limited to appointments with that staff member. Another business cannot see these records.

The operator of Avangard Booking can access the database in order to run the service. We do not sell this data and we do not use Instagram messages for advertising.

If that business has connected Google Calendar for the staff member, the appointment can be copied there, including the client name, email, phone, notes, service, and time. If the business uses Telegram notifications, the staff member or owner may receive a Telegram message about the appointment. The Instagram customer is not given a Telegram id.

Where it is stored

Appointment and Instagram records are stored in the MongoDB database used by Avangard Booking. The application is hosted on Vercel. The Instagram access token and the unused booking-link secret are stored encrypted. They are not shown in the owner or staff screens.

How long it is kept

These periods are the ones the application writes. A deletion date is enforced only where the database has the matching TTL index.

• The short-lived sign-in state used to connect Instagram expires after 10 minutes. The schema asks MongoDB to delete it after that time.
• Webhook receipts are marked for deletion 30 days after they are stored. They do not contain the message text.
• Connection diagnostics (a machine code such as connected or disconnected, not the token and not the message) are marked for deletion after 90 days.
• An open inquiry has no deletion date. When an inquiry is booked, or closed because its appointment was cancelled or is missing, the application sets a deletion date 180 days later. The inquiry index is created so MongoDB deletes that inquiry document when the date is reached. Receiving a webhook does not create or drop indexes.
• Appointments are not given an automatic deletion date. A Meta deletion receipt (a confirmation code and a status) is also kept without an automatic deletion date.

Disconnecting Instagram

When the owner disconnects Instagram, the access token is deleted, the saved permissions are cleared, and the connection is marked disconnected. The app also asks Instagram to stop message subscriptions and to revoke the token. If Instagram does not accept that request, the local disconnect still completes.

After disconnect, new direct messages are not turned into inquiries. Existing inquiries and appointments are not deleted. A booking link that was already issued can still be completed while the link is valid and the business is active. Removing the app in Instagram clears the token and marks the connection disconnected. That step alone does not erase inquiries or appointments.

Access and deletion

Email allivan2020@gmail.com to ask for a copy of your data or for deletion. Name the business and, if you connected the professional Instagram account, its username. There is no separate in-app form for a person who only sent a direct message.

If the professional account removes Avangard Booking and Meta sends a data-deletion request, the app clears the token, deletes the message preview, replaces the customer’s app-scoped id on inquiries, closes those inquiries, deletes webhook receipts for that professional account, and removes the Instagram customer id from appointments. The appointment itself remains: name, email, phone, and time stay as the business record. The status of that request can be checked with the confirmation link Meta receives.