X-DEVSVOICE

X-DEVS Voice · documents

Privacy

How X-DEVS Voice processes data on its public website and when connecting Instagram messages to the CRM.

Version dated 5 November 2026

01About the service and contact

X-DEVS Voice allows a company to connect a professional Instagram account, manage customer enquiries in CRM and reply from the lead card.

For questions about data processing and deletion, contact smnned@gmail.com.

02Data we process

After an administrator grants access through Instagram Login, the service receives the connected account’s identifier and name. For private conversations, it processes:

  • conversation participants’ identifiers, available names and usernames;
  • message text, timestamps, direction and delivery statuses;
  • information about attachment types.

Conversations may contain information that participants choose to share.

The initial connection requests up to 20 recent conversations and up to 20 messages in each. The availability of history depends on Instagram.

The connection uses the instagram_business_basic and instagram_business_manage_messages permissions.

03How we use the data

The service shows conversations to staff in the relevant workspace, creates a lead for a new enquiry, associates subsequent messages with the conversation and allows replies to be sent through Instagram.

Identifiers and technical statuses help prevent duplicates and repeated message delivery.

04Access and transfers

Messages are transferred between Meta/Instagram and the X-DEVS Voice server through the official API. Saved conversations and associated leads are available to authorized users in the company’s workspace.

Server data and backups are also processed as part of technical maintenance. Instagram’s own processing of data is governed by its own documents.

05Storage and protection

Conversations, leads and technical records are stored on the service’s server and included in backups. Instagram connection tokens are stored encrypted on the server.

Temporary incoming events are stored in an encrypted queue. After an event is successfully processed, its content is cleared while a processing record remains to prevent duplicates. This does not delete the message itself from CRM.

The account area uses a technical cookie for sign-in and local browser interface settings. Your Instagram password is entered on Instagram and is not required in the X-DEVS Voice form.

06Disconnecting and deleting data

An administrator can disconnect Instagram under Integrations → Messengers. This removes the active connection token and the content of events awaiting processing from the working database.

Previously imported conversations, leads and backups remain after disconnection.

The current version has no configured automatic deletion period for CRM history.

07Your requests

To request access to your data, a correction or deletion, email the address below. Include your Instagram account, the company account you communicated with and a description of your request.

To protect other people’s data, we may need confirmation that the request relates to you. The process, scope and outcome of the request are confirmed in the response. Do not send passwords, sign-in codes or tokens.

Contact X-DEVS Voice

smnned@gmail.com

For questions about data processing and deletion requests.

Detailed steps: Instagram data deletion →

08Public website analytics

X-DEVS Voice uses Google Analytics 4 on its public pages to understand visits and interest in the service. Analytics starts only after your consent. Before consent, and when you decline, these pages do not send requests to Google Analytics.

When enabled, Google Analytics may use cookies and process technical information about your browser and device, referral sources, visited public pages and approximate location. We also record successful connection-request submissions without their contents.

Analytics does not receive names, email addresses, phone numbers, form text, CRM records, workspace data or conversations. Sign-in pages and the workspace are not connected to Google Analytics. Advertising features are disabled.

Your choice is stored in this browser for 180 days. This is the retention period for your choice, not for data held by Google Analytics. Use the “Analytics” button on public pages to change your choice or withdraw consent. Withdrawal stops further sending; it does not delete information already received by Google.

If the browser does not allow the previous choice to be saved or removed from local storage, a necessary xdevs_public_analytics_optout cookie may store your refusal for up to 180 days. It contains only an opt-out flag, without a user identifier, and is not used for analytics.

09Applications and business briefs

When you submit an application or brief on the public website, we store your name, company name, email, phone number, business answers, brief language, submission time and processing consent. We use this information to contact you and prepare your onboarding.

Applications and answers are available to platform administrators, who can download the completed document. Data is stored on the service server and in backups. Before submission, brief answers remain only in the open browser form. To request correction or deletion, email smnned@gmail.com and identify the contact details used in your application.