Privacy policy

This policy explains what InstaDM247 collects when you connect an Instagram professional account, why we collect it, and how you get rid of it.

What we collect

• Your account details — the email address and name you sign up with, and a hashed password. We never store your password in readable form.
• Instagram account data — when you connect through Meta’s login screen, we receive an access token plus your username, profile picture, follower count and recent media. Tokens are encrypted at rest.
• Conversation data — the comments, story replies, mentions and direct messages that trigger your automations, along with the messages we send on your behalf and the Instagram-scoped IDs of the people involved.
• Contact records — tags, custom fields and any answers people give to forms you build. You control what is asked for.
• Usage data — timestamps, delivery outcomes and error details, used to show your analytics and diagnose failures.

What we never do

• We never ask for or store your Instagram password.
• We never sell or rent your data, or the data of people who message you.
• We never use conversation content to train a general-purpose model. When you enable the AI agent, messages are sent to the model provider solely to generate that specific reply.
• We never access endpoints beyond the permissions you granted.

Why we can keep this data

We process it to deliver the service you asked for: reading the events that start your automations, and sending the replies you configured. Where required, our legal basis is contract performance, and legitimate interest for security and abuse prevention.

How long we keep it

Conversation and analytics data stays while your account is active. Raw webhook payloads are retained for 30 days for troubleshooting. Delete a connected Instagram account and its contacts, conversations, messages and statistics are deleted with it.

Deleting your data

Disconnect an account in Settings to delete everything associated with it, or remove the app from Instagram directly — Meta notifies us and we revoke the token automatically. To delete everything, see our data deletion page.

People who message you

If someone messages a creator using InstaDM247 and wants their data removed, they can reply STOP — which suppresses them immediately — or contact us at the address below and we will remove their records.

Sub-processors

We use Meta Platforms (the Instagram API), our hosting and database provider, and — only if the account owner enables the AI agent — an AI model provider. We do not share data with anyone else.

Contact

Questions about this policy: support@instadm247.com.

Data controller: InstaDM247, the registered trade name of Rajat Pal, a proprietorship registered in India. Registered address: 79, Unnamed Road, Near Pablikhas Railway Station, Modi Puram, Meerut, Meerut, Uttar Pradesh, 250110, India. GSTIN: 09CVWPP3468C1ZX.