Privacy Policy

We collect the information you give us and the data required to run automations on your behalf:

• Account data — name, email, password hash, billing details.
• Instagram data — your connected profile, and the messages, comments and story replies your automations respond to.
• Usage data — log data, device and browser information, and feature usage for reliability and support.

To provide and improve the Service: delivering automations, syncing your inbox, generating analytics, processing payments, and providing support. We process this data as a processor on your behalf under our Data Processing Agreement.

When you connect Instagram through Meta login, we access only the permissions you grant and use them solely to operate the features you enable. We handle all Platform Data in line with Meta's Platform Terms and Developer Policies, and we do not sell it or use it for advertising.

We never sell your data. We share it only with vetted sub-processors (hosting, payments, email, analytics) under contract, and when legally required. A current sub-processor list is available on request.

Encryption in transit (TLS 1.3) and at rest (AES-256), least-privilege access, audit logging, and independent SOC 2 Type II assessment. Report any concern to security@instaflow.app.

We keep your data for as long as your account is active. On cancellation you can export your data for 30 days, after which it is permanently deleted, except where law requires longer retention.

Depending on your region (GDPR, CCPA, DPDP Act 2023), you may access, correct, export, or delete your personal data, and object to certain processing. Email privacy@instaflow.app and we will respond within 30 days.

We use essential and, with your consent, analytics cookies. See our Cookie Policy for the full list and controls.

We may update this policy; material changes are notified in advance. Questions? Email privacy@instaflow.app.