Effective date: 27 October 2026
This policy explains how Market Push Apps SRL ("MarketPushApps", "we", "us") handles data in the Instagram app for Wix (in Wix also shown as "Instagram Feed"; the "app"). The app lets a Wix Site Owner connect their own Instagram professional account (Business or Creator) and show its profile and recent posts on their Wix site.
The app is made by MarketPushApps. It is not made, endorsed or sponsored by Instagram or Meta.
Summary
We read only the Instagram account you connect, and only its profile and posts.
We use that data only to show your posts on your Wix site and in the app's dashboard.
We don't sell it, use it for advertising, share it with data brokers or use it to train AI models.
You can ask us to delete it at any time. See How to delete your data.
1. Who we are
Market Push Apps SRL, Romania, Costesti, Nr 66E. Email: [email protected].
When we show a Site Owner's Instagram posts on their site, we process that data on the Site Owner's behalf. For our own operations, such as accounts, support, security and email, we decide how data is used.
2. Data we get from Instagram
You connect your account in Instagram's own sign-in window. We never see your Instagram password. The app asks for one permission, instagram_business_basic, which lets it read:
Profile: your Instagram user ID (and the app-specific ID Instagram gives us), username, display name, a link to your profile picture, and your number of posts, followers and accounts followed.
Posts: for your recent posts: the post ID, the type (photo, video or Reel, carousel and its slides), links to the photo, video and thumbnail files that Instagram hosts, the link to the post on Instagram, the caption and its hashtags, the number of likes and comments, and when it was posted.
Access token: the key Instagram issues so the app can read the data above, its expiry date, and the list of permissions you granted.
We store links to the photos and videos that Instagram hosts. We don't keep our own copies of your photos or videos.
We don't read your private messages, the text of comments, Stories, insights or other people's accounts. The app never posts, likes, comments or changes anything on your Instagram.
3. Data we get from Wix and from you
From Wix, when the app is installed: the site ID and app instance ID, the site name and address, the Site Owner's email address, and the site's language and region.
Your settings: how the feed looks and which posts it shows.
Support: what you send us in the support chat or by email.
4. Visitors of the Site Owner's site
Visitors see the posts the Site Owner chose to show. To show them, the widget loads the feed from our servers and the images straight from Instagram's servers. As with any web page, those servers receive the visitor's IP address and browser details with each request. Our hosting provider keeps these request logs for a short time for security and troubleshooting.
To show the Site Owner simple numbers in the app's dashboard, the widget also sends us anonymous counts of what visitors do with the feed: feed views, post opens, clicks on Follow, Instagram and shop links, and add-to-cart clicks. These counts carry no visitor identifier, and we only store them as totals.
We don't set cookies on visitors' devices and don't build profiles of visitors. The widget saves a copy of the feed in the visitor's browser so it shows faster on the next visit.
5. How we use the data
To show the profile and posts on the Site Owner's Wix site, in the Wix editor and in the app's dashboard. The dashboard also shows numbers about the posts, such as likes, comments and how often you post, and the anonymous visitor counts described in section 4.
To keep the feed up to date. We read your posts from Instagram again from time to time, for example when the site, the editor or the dashboard is opened.
To keep the connection working. Instagram tokens last 60 days, and we renew the token before it runs out.
To give support, keep the app secure and fix errors.
To email Site Owners about the app (service updates and, where allowed, news about our apps). You can unsubscribe at any time.
We use Instagram data only for these purposes. We don't sell it, rent it, use it for advertising, use it to build profiles of people, pass it to data brokers or use it to train AI models.
6. Where we store it and how we protect it
Data is stored on Google Cloud Platform (Firestore database and Cloud Functions) in the United States.
The access token is encrypted (AES-256-GCM) before it is stored and is never sent to a browser.
All traffic to and from our servers uses HTTPS.
Each site's data is stored separately. Settings and connection data need the site's Wix authorization; the profile and posts a site shows publicly are served to its visitors without sign-in.
Only our team has access to production systems, and only when needed.
No method of storage or transmission is 100% secure, but we work to protect your data.
7. Who we share it with
Visitors of your Wix site see the posts and profile details you choose to show. This is what the app is for.
Wix, the platform the app and your site run on.
Service providers that work for us: Google Cloud (hosting and database), Sentry (error reports) and Intercom (support chat, email and help center). They use the data only to provide their service to us.
Instagram (Meta). The app sends requests to Instagram to read your account. Meta's own privacy policy applies to your use of Instagram.
Authorities, when the law requires it.
We don't share Instagram data with anyone else.
8. How long we keep it
While your account is connected: we keep your profile and recent posts and update them from Instagram. When you delete a post on Instagram, we remove it from our copy at the next update.
Access token: kept while your account is connected and renewed automatically. We delete it at once when you remove the app's access in Instagram, or when we delete the connection.
If you remove the app's access in Instagram: we delete the token at once. We keep the saved profile and posts so the Site Owner's site doesn't go blank while they reconnect. They are deleted when the app is removed from the site, when Instagram sends us a data deletion request, or when you ask us, and in any case within 30 days.
The Disconnect button in the app's settings deletes the token, saved profile, posts and stats for that account at once.
When the app is removed from a Wix site: we delete the token, profile, posts and stats as soon as Wix tells us the app was removed. We keep a basic record of the install (site ID, site name and address, Site Owner email) for our records and support, and delete it on request.
Data deletion requests: handled right away (see below). We keep a short record that the request was completed: the confirmation code, the app-specific Instagram ID, how many connections were deleted and when. This record holds no posts or profile data.
Connection log: when someone connects, we log the time, the result and the Instagram username that signed in, so we can help if connecting fails. We delete it on request.
Support conversations are kept as long as needed to help you. Error logs are kept for a short time.
How to delete your data
You can ask us to delete your data at any time, whether or not the app is still installed. Full steps are in Instagram - Data Deletion Instructions. In short:
Click Disconnect in the app's settings (Site Owners). This deletes the token, saved profile, posts and stats for that account at once.
Remove the app from your Wix site. We then delete the Instagram token, profile, posts and stats.
Remove the app's access in Instagram (Settings and activity → Website permissions → Apps and websites). We delete the token at once, and the saved profile and posts within 30 days. If Instagram sends us a data deletion request, we delete the connection, profile and posts right away and give you a confirmation code.
Email us at [email protected] from the email you use with Wix, or with your Instagram username and site address. We delete your data within 30 days and confirm by email.
9. Your rights
Depending on where you live (for example in the EU or UK under the GDPR, or in California), you may have the right to access, correct, delete or export your personal data, to object to or restrict how we use it, and to withdraw consent. To use any of these rights, email [email protected]. We answer within 30 days.
If the data is about a visitor of a Wix site, you can also contact the Site Owner, who chose to show it. We will help them answer.
You can also complain to a data protection authority. In Romania this is the ANSPDCP (www.dataprotection.ro).
10. Legal bases (EU and UK)
Contract: to provide the app the Site Owner installed and the connection they set up.
Consent: you give it when you connect your Instagram account. You can withdraw it at any time by removing the app's access or asking us to delete your data.
Legitimate interests: to keep the app secure, fix errors, give support and tell Site Owners about our apps.
Legal obligations: where the law requires us to keep or share data.
11. International transfers
We are based in Romania and store data in the United States on Google Cloud. Where the law requires it, these transfers are protected by safeguards such as the European Commission's standard contractual clauses.
12. Children
The app is for businesses and creators running a Wix site. It is not meant for children under 16, and we don't knowingly collect their data.
13. Changes to this policy
If we change how the app uses data, we will update this page and its effective date before the change takes effect. If a change is significant, we will also tell Site Owners in the app or by email.
14. Contact
Market Push Apps SRL
Romania, Costesti, Nr 66E
Email: [email protected]