Effective Date: 09/09/2026

This Privacy Policy explains how Stroke Infotech (“we,” “us,” “our”) collects, uses, stores, and protects information in connection with SI Instagram Feed (the “App”), a Webflow Marketplace App that lets Webflow customers connect an Instagram account and display its posts on their website. This policy covers two categories of people: (1)Webflow customers who install and configure the App, and (2)visitors who view the resulting Instagram feed on a customer’s published site.

1. Information We Collect

a) From your Webflow account (via Webflow OAuthauthorization) When you install SI Instagram Feed, Webflow’s authorization flow shares with us: - Your Webflow account identifier,name, and email address - The Site ID(s) and basic site information forthe site(s) you authorize the App to access - An OAuth access token scoped to the permissions you grant during installation, used solely to let the App read/write the specific content (e.g., adding component and custom code block) needed to operate.

b) From your connected Instagram account (via Instagram/Meta authorization) To display your feed, you must separately connect an Instagram Business or Creator account through Meta’s authorization flow. This shares with us: - Your Instagram account ID, username, and profile picture - An access token that lets the App retrieve your public media (images, captions, permalinks, thumbnails, and basic engagement metrics such as like/comment counts) for display purposes only - We do not request or receive your Instagram password, private messages, or private account data.

c) From site visitors Visitors who simply view the published Instagram feed on a customer’s site do not have any personal data collected by us. Their browser loads publicly available Instagram media (images/captions) that our backend has cached or proxied; we do not track individual visitors, and we do not set feed-specific tracking cookies. Standard Webflow-hosting or site-level cookies used by the customer’s own site are outside our control and covered by that site owner’s own privacy policy.

2. How We Use This Information

We use the information above only to: - Authenticate you and maintain your App installation and configuration - Fetch, cache, and render your connected Instagram account’s public media on your site -Provide support, troubleshoot issues, and communicate service related notices - Maintain the security, integrity, and reliability of the App - Comply with legal obligations.

We do not sell personal information, and we do not use your Instagram content or account data for advertising, profiling, or any purpose unrelated to operating the feed you configured.

3. Data Storage & Security

• OAuth access tokens (Webflow and Instagram/Meta) are stored encrypted on our servers hosted at hosting provider and are never exposed in client-side code or logs.
• All data in transit between your browser, our servers, Webflow, and Instagram/Meta is encrypted via HTTPS/TLS.
• Access to stored tokens and account data is restricted to authorized per sonnel/systems on a need-to-know basis.
• We retain cached Instagram media and metadata only as needed to render your feed efficiently, and refresh it periodically per Instagram’s API terms.

4. Data Sharing

We share data only with: - Webflow, to the extent required to operate as a Marketplace App (per Webflow’s own Privacy Policy and Developer Terms) - Meta/Instagram, solely to request and retrieve your connected account’s media via the Instagram Graph API/Instagram API - Service providers who host our infrastructure under confidentiality obligations,strictly to operate the App - Legal authorities, only where required by law.

We do not sell, rent, or share your data with advertisers or analytics brokers.

5. Data Retention

We retain your Webflow and Instagram account tokens and configuration data for as long as the App remains installed on your site. If you uninstall the App or disconnect your Instagram account,we delete the associated access tokens within 7 days and delete cached media within 7 days there after, except where retention is required for legal, security, or dispute-resolution purposes.

6. Your Rights

Depending on your location (e.g., under GDPR or CCPA/CPRA), you may have the right to access, correct, export, or delete the personal data we hold about you, and to withdraw consent by disconnecting your accounts or uninstalling the App at any time. To exercise these rights, contact us at info@strokeinfotech.com. You can also revoke the App’s access directly from your Webflow account settings and your Instagram/Meta account’s “Apps and Websites” settings at any time.

7. International Data Transfers

If you access the App from outside india,your data may be transferred to and processed in india where our servers or service providers are located. We take appropriate safeguards to protect data transferred internationally.

8. Cookies

Our own dashboard/settings interface may use essential cookies or local storage for session management. We do not use the App to place third-party advertising or tracking cookies on your visitors’ browsers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted here with a new effective date, and where required, we will notify installed customers directly.

10. Contact

Questions about this policy or your data: info@strokeinfotech.com