Privacy Policy

AutoReply sends automated replies on Instagram and Telegram on behalf of the account owners who connect their accounts to this service. This page explains what data is processed and why.

Data we store about account owners

• Your sign-in identity (email address, phone number, or Google account ID) and workspace membership.
• Instagram access tokens and Telegram bot tokens, encrypted at rest with AES-256-GCM, used only to call the official Instagram API and Telegram Bot API on your behalf.
• The campaigns you create: keywords, messages, links, and the posts they attach to.
• A push-notification device token if you enable notifications in the app.

Data we process about people who interact with a connected account

• The public comment or direct message text that matched a campaign keyword, the sender's Instagram-scoped user ID and username, and the delivery status of the reply. This is kept as an activity log so the account owner can see what was sent.
• Whether the sender follows the connected account, when a campaign requires a follow before sending a link. This is read from Instagram's is_user_follow_business flag and is not stored.
• Click events on tracked links: a hashed IP address, user agent, and referrer. The raw IP address is never stored.

What we do not do

• We never scrape Instagram, automate a browser, or ask for an Instagram password. All access goes through Meta's official Instagram API with permissions you grant on Meta's consent screen.
• We do not sell or share personal data with third parties. Data leaves this service only to Meta, Telegram, and the infrastructure providers hosting it.
• We only act on comments on the connected account's own posts, and on messages sent directly to the connected account.

Retention and deletion

Data is kept while the account owner's workspace exists. Disconnecting an Instagram account deletes its token and stops all processing for it. Deleting your account in the app removes your user, workspace, connected accounts, campaigns, and logs. See the data deletion page for the exact steps.

Contact

Questions about this policy go to the operator listed at the top of this page.