Privacy Policy
Whiskey Bent Hat Co. — Ambassador Portal
Last updated: March 18, 2026
1. Who We Are
This privacy policy applies to the Ambassador Portal operated by Whiskey Bent Hat Co. ("we", "us", "our"). The Ambassador Portal is an internal tool used to manage relationships with brand ambassadors and influencers through Instagram Direct messaging and conversation tracking.
2. What Data We Access
Through the Meta APIs (Instagram Graph API and Messenger Platform), the Ambassador Portal accesses the following data:
- Instagram Direct messages — conversations between Whiskey Bent Hat Co. and ambassador or influencer accounts that have messaged us or that we have contacted
- Instagram profile information — username, display name, profile picture, follower count, and biography of ambassador accounts
- Conversation metadata — message timestamps, thread identifiers, and participant information
3. What Data We Do Not Access
The Ambassador Portal does not access:
- Private messages or conversations you have with other accounts
- Your followers list, following list, or social graph
- Your posts, stories, reels, or other content beyond what is publicly visible
- Payment or billing information
- Personal data of any users who have not directly communicated with our Instagram account
- Customer purchase history or order data
4. How We Use the Data
Data accessed through the Ambassador Portal is used exclusively for:
- Communicating with current and prospective brand ambassadors via Instagram Direct messages
- Tracking ambassador relationships, pipeline stages, and conversation history within our internal CRM
- Enriching ambassador profiles with publicly available Instagram information
We do not sell, rent, license, or otherwise share this data with any third parties. Data is used solely for internal ambassador relationship management.
5. Data Storage and Security
- Data is stored on a private, access-controlled server
- API credentials and access tokens are stored in environment variables, never in source code
- All API requests use HTTPS encryption in transit
- API calls are authenticated using HMAC-SHA256 (appsecret_proof) as required by Meta
- The Ambassador Portal requires password authentication to access
- Server access is restricted to authorized Whiskey Bent Hat Co. personnel only
6. Data Retention
Ambassador conversation history and profile data is retained for as long as the ambassador relationship is active. Data for inactive ambassadors may be retained for up to 12 months for relationship management purposes. Data that is no longer needed for business purposes is deleted.
7. Data Deletion
You may request deletion of any data associated with your account or conversations that is stored by the Ambassador Portal. To request data deletion:
- Send an email to service@whiskeybenthatco.com with the subject line "Data Deletion Request"
- Include your name, your Instagram username, and a description of the data you would like deleted
- We will confirm receipt of your request within 5 business days
- Your data will be deleted from the Ambassador Portal within 30 days of the confirmed request
Upon deletion, all stored messages, profile data, and relationship history associated with your account will be permanently removed from our systems. Deletion of data from Meta's own systems is governed by Meta's Privacy Policy.
8. Changes to This Policy
We may update this privacy policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page.