Privacy Policy

Last updated: October 2, 2026

This Policy explains how MyPorterLabs Inc. ("MyPorter," "we," "us") handles personal information when wellness and beauty businesses use MyPorter to answer Instagram direct messages and make appointments (the "Service"). The Service is offered to businesses operating in the United States. This Policy applies to those businesses, people in the United States who message a business using the Service, and visitors to myporter.ai.

Instagram is operated by Meta Platforms, Inc. Your use of Instagram is also subject to Instagram's Privacy Policy.

1. Website visitors

When you visit myporter.ai, we use Google Analytics to understand how visitors use the site. Google Analytics may collect device and usage information such as your browser type, pages viewed, approximate location, and online identifiers through cookies and similar technologies. Google Analytics uses first-party cookies, including cookies that help distinguish visitors and sessions. You can block or delete cookies in your browser settings. Our website does not currently respond to Do Not Track signals. We do not configure Google Analytics to use website visitor information for advertising or cross-site behavioral advertising. Google may process information under its own privacy policy and service settings. Learn more in Google’s Privacy Policy.

2. Who is responsible for the information?

For information about a business owner’s MyPorter account, we determine how it is used and are responsible for handling it as described here.

When someone messages a business, that business decides what information to request and how to use it. The business is responsible for that information. MyPorter processes message and booking information for the business to provide the Service. If you have a question about a particular business’s privacy practices or want to exercise a right over information you shared with it, contact that business first. We help the business respond as required.

3. Information we handle

• Business account information: name, contact details, Instagram account identifiers, and information needed to set up and support the Service.
• Business information: details available from the business’s Instagram profile and website, along with services, prices, hours, availability, policies, and other information the business provides or updates.
• Messages: the content of Instagram DMs exchanged with the business, associated account or profile details made available through the integration, and message timestamps.
• Appointment details: information needed to check availability and create or manage a requested booking, such as the service, requested time, and details the person chooses to provide.
• Technical and support information: service logs, usage events, device or browser information, and communications with our support team.
• Billing information: when a business starts a paid plan, payments are processed by Stripe. We receive limited billing details, such as the cardholder name, card type, last four digits and billing address, but never full card numbers. Stripe handles payment information under its own Privacy Policy.

Please do not send sensitive information, such as detailed medical or health information, through Instagram DMs. The business may ask you to contact its staff directly when a question needs personal attention.

4. How we use information

• Set up and operate the Service, including learning the business’s offerings from its profile, website, and information it supplies.
• Generate replies to Instagram DMs, answer questions about services, prices, and availability, and help make appointments.
• Check availability and create or update appointments through a connected booking system or calendar when configured by the business.
• Show the business its conversations and bookings so it can review them and step into a conversation.
• Provide support, protect the Service, troubleshoot issues, and meet legal obligations.

5. AI replies

To draft and send replies, message content and relevant business information are processed by AI service providers acting for us. AI replies may be incomplete or inaccurate. The Service is intended for routine questions and booking requests, not medical advice or emergencies. A business can review conversations in its Instagram inbox and take over when needed.

Our AI providers are contractually restricted from using Service content to train their general-purpose models.

6. How information is shared

We share information only as needed to provide and protect the Service:

• Meta: Instagram messages are handled through Meta’s services and APIs.
• Service providers: AI, hosting, security, and technical providers that help operate MyPorter and are required to protect information and use it only for our instructions.
• Payment processing: Stripe, to process subscription payments.
• Connected systems: the booking or calendar service selected by the business, to check availability and create or manage appointments.
• The business: messages and booking details are available to the business operating the Instagram account so its team can review or continue the conversation.
• Legal and safety reasons: when disclosure is required by law or reasonably needed to protect people, rights, or the Service.
• Business transfers: if we are involved in a merger, financing, acquisition, or sale of assets.

We do not sell personal information. We do not use message content for targeted advertising.

7. Retention, deletion, and security

We keep information for as long as needed to provide the Service, meet our legal obligations, resolve disputes, and enforce our agreements. The business controls its Instagram inbox and connected booking records and should consult its own retention practices for those systems. To request deletion of Service data, email hello@myporter.ai with the subject “Data deletion request” and the Instagram username connected to the Service. We will verify the request, delete the applicable Service data within 30 days unless we must retain it to meet a legal requirement, and confirm by email. If you are a person who messaged a business and contact us directly, we will forward your request to that business or work with it to handle the request. We may retain limited information where required by law.

We use reasonable technical and organizational safeguards to protect information. No online service can guarantee perfect security.

8. U.S. privacy rights

Privacy rights depend on the state where you live and the laws that apply. Where applicable, you may request access to, correction of, or deletion of personal information, or exercise other rights provided by state law. To make a request about a conversation or appointment, contact the business you messaged. Business customers can contact us at hello@myporter.ai. We will verify and handle requests as required by law.

We do not sell personal information or share it for cross-context behavioral advertising.

9. Children

The Service is designed for businesses and is not directed to children. Businesses should not use it to knowingly collect personal information from children in ways prohibited by applicable law.

10. Changes to this Policy

We may update this Policy as the Service changes. We will post the updated version here and revise the date above. If a change materially affects how we handle information, we will provide notice where required.

11. Contact us

MyPorterLabs Inc.
131 Continental Dr, Suite 305
Newark, DE 19713, USA
hello@myporter.ai