1. What the Extension does (single purpose)
The Extension is a side-panel tool that runs only on instagram.com. It helps you send personalized direct messages from your own Instagram account. You can create outreach campaigns targeting your followers, hashtags, or custom lists, using message templates and built-in rate limits. All of this runs inside your own logged-in Instagram session, in your own browser.
2. Data the Extension handles
a) Information you create and provide
- Campaigns you configure (including the targeting type: followers, hashtags, or custom lists).
- Message templates you write.
- Settings you choose (for example, daily limits and timing controls).
- License key, if you purchase a paid subscription.
b) Information the Extension reads from Instagram to do its job
- Instagram usernames and target lists that appear on the Instagram pages you are viewing (for example, follower lists or accounts under a hashtag). The Extension reads this on-page content only to identify who a campaign should message. This information is used in-session and, where needed to prevent duplicate messaging, is stored locally as described below.
c) Information the Extension generates automatically
- Daily message counter — a number used to enforce your daily sending limit.
- DM memory — a list of Instagram usernames you have already messaged, kept so the Extension does not message the same person twice.
The Extension does not access your Instagram password or login credentials. It operates within your existing, already-signed-in Instagram session. It does not read your browsing history or the content of tabs on any website other than Instagram.
3. How the Extension uses this data
All data listed in Section 2 is used exclusively to provide the Extension's single purpose — helping you run personalized Instagram DM outreach. Specifically:
- Campaigns, templates, and settings are used to compose and send the messages you configure.
- Target lists and usernames are used to determine recipients.
- The daily counter and DM memory are used to enforce your limits and avoid duplicate messages.
- The license key is used only to verify your subscription status.
We do not use any of this data for advertising, profiling, credit assessment, resale, or any purpose unrelated to the Extension's single purpose.
4. How and where data is stored
With the exception of the license key (see Section 5), all data is stored locally on your own device using the Chrome storage API. This includes your campaigns, message templates, settings, daily message counter, DM memory, and license key. This local data is not transmitted to us or to any third party. It remains on your device until you clear it or uninstall the Extension.
5. Data sharing — every party your data is shared with
The Extension shares data with the following parties, and no others:
- Our subscription server (
https://ig-outreach.vercel.app). When you use a paid license, the Extension sends only your license key to this endpoint to verify your subscription. The server returns a simple "paid" or "free" response. No other data — no messages, no Instagram usernames, no campaign data, no browsing data — is ever sent to this server. This endpoint is hosted on Vercel Inc., our hosting provider, which processes the request in transit as part of delivering the service. - Instagram / Meta Platforms, Inc. Because the Extension sends direct messages through Instagram using your own account, the messages you choose to send are, by nature, delivered to your intended recipients through Instagram's own platform and are therefore visible to Instagram and to those recipients. This is inherent to sending an Instagram DM and is governed by Instagram's own terms and privacy policy.
We do not share your data with any analytics providers, advertising networks, data brokers, or any other third parties. We do not sell your data. We do not transfer your data except as strictly described above.
IG Outreach Pro is an independent tool and is not affiliated with, endorsed by, or sponsored by Instagram or Meta Platforms, Inc.
6. Data we do NOT collect
- We do not collect your Instagram password or login credentials.
- We do not collect or transmit your message content to our servers.
- We do not collect your browsing history or activity on non-Instagram sites.
- We do not use cookies or trackers for advertising.
- We do not collect payment card details through the Extension (subscription payments, if any, are handled by our separate checkout provider outside the Extension).
7. Data retention and deletion
Because your data (other than the transient license-key check) lives only on your device, you are in full control of it:
- To delete campaigns, templates, and settings, use the Extension's own controls or clear the Extension's storage.
- To delete everything the Extension has stored, remove the Extension from your browser. Uninstalling clears its local storage.
- We do not retain copies of your local data on any server. Your license key is only received transiently during verification and is used solely to return your subscription status.
If you have questions about deletion, contact us at highpointscaling@gmail.com.
8. Data security
The license-key verification request is transmitted over an encrypted HTTPS connection. All other data remains local to your device and is not transmitted.
9. Limited Use disclosure
The Extension's use of information received from Google APIs, and all user data handled by the Extension, will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. We only use the data described above to provide and improve the Extension's single, user-facing purpose. We do not transfer this data except as necessary to provide that purpose, to comply with applicable law, or to protect against security threats, and we do not use or transfer it for serving advertisements or for creditworthiness or lending purposes.
10. Children's privacy
The Extension is intended for users aged 18 and older and is not directed to children. We do not knowingly collect data from children.
11. Changes to this policy
We may update this Privacy Policy from time to time — for example, if we add a permission or change how data is handled. When we do, we will revise the "Last updated" date above and, where the change is material, disclose it before it takes effect. The current version is always available at this URL.
12. Contact
For any questions about this Privacy Policy or your data, contact:
Highpoint Scaling
Email: highpointscaling@gmail.com · Support page