Privacy Policy
Last updated: October 8, 2026
This Privacy Policy explains how Stalwart Prime LLC (“Truorx”, “we”, “us”) collects, uses, stores and deletes information when you use the Truorx website (truorx.com) and the Truorx service — an AI assistant that replies to customers of Instagram shops in Instagram Direct and forwards orders to the shop owner in Telegram (the “Service”).
Truorx uses the Instagram API with Instagram Login provided by Meta Platforms, Inc. Our use of information received from Meta follows the Meta Platform Terms and Developer Policies.
1. Who this policy covers
- Shop owners — businesses that connect their Instagram professional account to Truorx (“Customers”).
- End users — people who send messages to a Customer’s Instagram account that is connected to Truorx.
- Website visitors — anyone who visits truorx.com.
For end users’ messages we process data on behalf of, and under the instructions of, the Customer whose Instagram account they write to. The Customer is responsible for informing its own customers about how it handles their data.
2. Information we collect
From shop owners
- Contact details you give us, such as your name and email address.
- Instagram account information received through Instagram Login: Instagram account ID, username, account name and profile picture, and an access token that lets the Service work on your behalf.
- Your Instagram posts (captions, images, videos, links and thumbnails), used to build your product catalog.
- Shop settings, product catalog data (including from a Google Sheet, CSV or Meta catalog you provide) and the Telegram chat ID where you receive orders.
From end users (via the Instagram API)
- Messages sent to the connected Instagram account: text, photos, videos, voice messages and shared posts.
- The sender’s Instagram-scoped user ID and username.
- Order details the end user chooses to share in the conversation, such as name, phone number, delivery address and selected products.
Technical data
- Server logs (time of request, error information) and usage counters (number of messages and AI processing volume) needed to run, secure and bill the Service.
- The website uses no advertising or analytics cookies. Our hosting provider Cloudflare may process IP addresses to deliver and protect the website.
3. How we use information
- To read incoming Instagram messages and reply to them on behalf of the Customer.
- To understand photos, videos and voice messages (including converting voice to text) so the reply is accurate.
- To build and update the Customer’s product catalog from its Instagram posts.
- To send orders and notifications to the Customer’s Telegram chat.
- To provide the control panel, statistics and customer support.
- To keep the Service secure, prevent abuse and meet legal obligations.
We do not sell personal information, do not use it for advertising, do not share it with data brokers, and do not use data received from Instagram to train AI models.
4. Service providers
We share information only with providers that help us run the Service, and only as needed for that purpose:
| Provider | Purpose |
|---|---|
| Meta Platforms (Instagram API) | Receiving and sending Instagram messages, reading the Customer’s posts |
| Anthropic | AI processing to generate replies and understand images |
| OpenAI or Groq | Converting voice messages and video audio to text |
| Telegram | Delivering orders and notifications to the Customer |
| Railway | Hosting the Service and its database |
| Cloudflare | Hosting and protecting the website |
We may also disclose information if required by law or to protect the rights and safety of our users or the public. If our business is sold or merged, information may be transferred under this policy.
5. Where information is stored
The Service and its database are hosted on servers in the United States. Photos, videos and voice messages are processed in temporary memory only and are deleted immediately after processing; we keep only the text of the conversation, including transcripts and short descriptions of media. By using the Service from outside the United States you understand that your information will be transferred to and processed in the United States.
6. How long we keep information
| Data | Retention |
|---|---|
| Conversation history with end users | Up to 90 days after the last message |
| Orders | Up to 12 months |
| Catalog built from Instagram posts | While the Instagram account is connected |
| Instagram access token | Until the account is disconnected |
| Server logs | Up to 30 days |
| Usage statistics (no message content) | While the Customer account exists |
When a Customer disconnects its Instagram account or closes its Truorx account, we delete the related data within 30 days, unless we must keep it longer by law.
7. Data Deletion
You can ask us to delete your data at any time.
Email hello@truorx.com with the subject “Data Deletion Request” and include your Instagram username (and, for shop owners, the connected shop account).
- Shop owners: we will delete your account data, access tokens, catalog, conversations and orders within 30 days and confirm by email. You can also remove Truorx at any time in Instagram: Settings → Website permissions → Apps and websites; this revokes our access immediately and we delete the related data within 30 days.
- End users who wrote to a shop that uses Truorx: send us the request above with your Instagram username and the shop’s username. We will delete your conversation history and order details held by Truorx within 30 days and confirm by email. You may also contact the shop directly.
Data may remain in encrypted backups for up to 30 additional days before it is overwritten.
8. Security
We use encryption in transit (HTTPS), restrict access to production systems, keep access tokens on the server only and never in your browser, and ask our providers to protect data appropriately. No system is 100% secure; if a breach affecting your data occurs, we will notify you as required by law.
9. Your rights
Depending on where you live (for example, the EU/UK GDPR or the California Consumer Privacy Act), you may have the right to access, correct, delete or export your personal information, and to object to or restrict its processing. We do not sell or “share” personal information as defined by California law. To exercise any right, email hello@truorx.com. We will not discriminate against you for exercising your rights.
10. Children
The Service is intended for businesses and is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect information from children. If you believe a child has provided us data, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date above and, for significant changes, notify Customers by email or in the control panel.
12. Contact
Stalwart Prime LLC
Email: hello@truorx.com