PRIVACY POLICY
Last Updated: November 6, 2025
---
1. INTRODUCTION
North Star Construction Group ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, process, and protect information when you interact with us through Instagram Direct Messages, comments, and other communications.
This policy applies to all interactions through our Instagram Business account (@northstarforming) and our automated messaging system.
2. INFORMATION WE COLLECT
When you interact with our Instagram Business account, we may collect the following information:
2.1 Information from Instagram
• Profile Information: Your Instagram username, profile picture, and user ID
• Message Content: Text, images, and other content you send to us via Instagram Direct Messages
• Comment Data: Comments you post on our Instagram posts, including your username and comment content
• Engagement Data: Information about when you message us or comment on our posts
• Story Mentions: When you mention our account in your Instagram stories
2.2 Information You Provide
• Project details, inquiries, or questions you share with us
• Contact information (phone number, email address) if you voluntarily provide it
• Location information if you share it with us for project estimates
• Photos or videos of projects you share for consultation purposes
3. HOW WE COLLECT INFORMATION
We collect information through:
• Instagram Graph API: We use Meta's official Instagram Graph API to receive and process direct messages and comments
• Webhooks: Real-time notifications when you send us a message or comment on our posts
• Manual Entry: Information you voluntarily provide during conversations
4. HOW WE USE YOUR INFORMATION
We use the information we collect for the following purposes:
• Customer Support: To respond to your inquiries, questions, and service requests
• Project Management: To provide estimates, schedule consultations, and manage construction projects
• Communication: To maintain conversation history and provide consistent customer service
• Service Improvement: To analyze common questions and improve our response quality
• Business Operations: To route inquiries to the appropriate department (sales, operations, or accounting)
• Record Keeping: To maintain records of customer interactions for quality assurance
5. HOW WE PROCESS AND STORE YOUR INFORMATION
5.1 Processing Methods
• Automated Routing: We use n8n workflow automation to categorize and route messages to the appropriate team member
• AI Analysis: We may use AI tools to understand message content and provide relevant responses
• Human Review: All automated responses can be reviewed by our team members
5.2 Data Storage
• Message content and metadata are stored in our secure database (Supabase)
• Conversation history is maintained to provide consistent customer service
• Media Content: We do not permanently store or cache media files (images/videos) from Instagram. Media URLs from Instagram are temporary and expire according to Meta's policies
• Your information is stored on secure servers located in the United States
5.3 Data Retention
• Active conversation data: Retained while you are an active customer or until you request deletion
• Completed project data: Retained for up to 7 years for business record-keeping purposes
• Inactive conversations: Automatically archived after 2 years of inactivity
6. HOW WE SHARE YOUR INFORMATION
We do not sell, rent, trade, or license your personal information to third parties. We may share your information only in the following limited circumstances:
• Service Providers: We use third-party services that help us operate our business:
- n8n (workflow automation)
- Supabase (secure database storage)
- Meta/Instagram (messaging platform)
These providers are contractually obligated to protect your data and only use it for the purposes we specify.
• Legal Requirements: When required by law, court order, or legal process
• Business Protection: To protect our rights, property, or safety, or that of our customers or the public
• Business Transfer: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner
7. WHAT WE DON'T DO WITH YOUR DATA
In compliance with Meta's Platform Terms, we explicitly do NOT:
• Sell, license, or purchase your personal data
• Make your data available through search engines
• Use your data for surveillance purposes
• Use your data to make eligibility determinations (housing, employment, education)
• Use your data for discriminatory purposes
• Share your data with unauthorized third parties
• Attempt to decode, circumvent, or de-anonymize data
• Use your data in ways not described in this policy
8. DATA SECURITY
We take the security of your information seriously and implement appropriate technical and organizational measures:
• Encrypted data transmission (HTTPS/TLS)
• Secure database storage with access controls
• Regular security audits and updates
• Limited employee access to personal data (need-to-know basis)
• Industry-standard security practices
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
9. YOUR RIGHTS AND CHOICES
You have the following rights regarding your personal information:
• Access: You can request a copy of the personal information we hold about you
• Correction: You can request that we correct inaccurate information
• Deletion: You can request that we delete your personal information (subject to legal retention requirements)
• Opt-Out: You can stop interacting with us on Instagram at any time
• Data Portability: You can request your data in a portable format
To exercise any of these rights, please contact us using the information in Section 13.
10. INSTAGRAM-SPECIFIC INFORMATION
When you interact with us on Instagram:
• You are also subject to Instagram's own Terms of Service and Privacy Policy
• Meta (Instagram's parent company) also collects and processes your information according to their privacy policies
• You can control your Instagram privacy settings in your Instagram account settings
• You can block or restrict our account at any time through Instagram
• Message history may be visible to you in your Instagram app
11. THIRD-PARTY LINKS
Our Instagram account or messages may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with any information.
12. CHILDREN'S PRIVACY
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.
13. CONTACT US
If you have any questions about this Privacy Policy, want to exercise your rights, or need to request deletion of your data, please contact us:
North Star Construction Group
Email: [YOUR EMAIL ADDRESS]
Instagram: @northstarforming
Phone: [YOUR PHONE NUMBER]
Address: [YOUR BUSINESS ADDRESS]
Response Time: We will respond to your request within 30 days.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes:
• We will update the "Last Updated" date at the top of this policy
• Significant changes will be communicated through our Instagram account
• We will retain previous versions of this policy as required by Meta
Your continued use of our Instagram messaging services after changes are posted constitutes your acceptance of the updated policy.
15. INTERNATIONAL DATA TRANSFERS
Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws than your jurisdiction. By using our Instagram messaging services, you consent to the transfer of your information to the United States and other countries where we operate.
16. LEGAL BASIS FOR PROCESSING (GDPR)
If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the context:
• Contract Performance: Processing necessary to respond to your inquiries and provide services you request
• Legitimate Interests: Processing necessary for our legitimate business interests (customer service, business operations)
• Consent: Where you have given explicit consent for specific processing activities
• Legal Obligations: Where we must process data to comply with legal requirements
17. CALIFORNIA PRIVACY RIGHTS (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
• Right to know what personal information we collect and how we use it
• Right to request deletion of your personal information
• Right to opt-out of the sale of your personal information (note: we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights
18. COMPLIANCE WITH META PLATFORM TERMS
This privacy policy is designed to comply with Meta's Platform Terms and Policies. We:
• Only process Instagram platform data as described in this policy
• Comply with all applicable laws and Meta's terms
• Maintain this policy as publicly accessible and current
• Retain all versions of this policy as required by Meta
19. SERVICE PROVIDERS AND THEIR POLICIES
Our service providers who process your data have agreed to comply with this privacy policy and Meta's Platform Terms:
• n8n: Workflow automation platform - Privacy Policy: https://n8n.io/legal/privacy
• Supabase: Database and backend services - Privacy Policy: https://supabase.com/privacy
• Meta/Instagram: Messaging platform - Privacy Policy: https://www.facebook.com/privacy/policy/
20. AUTOMATED DECISION MAKING
We may use automated systems to:
• Route your messages to the appropriate department
• Provide initial responses to common questions
• Categorize inquiries for efficient handling
You have the right to request human review of any automated decisions that significantly affect you.
---
© 2025 North Star Construction Group. All rights reserved.
This privacy policy is effective as of November 6, 2025.