Privacy policy

If you connect an Instagram account

We store:

• Your Instagram professional account ID and username.
• The access token Instagram issues, encrypted at rest, and its expiry date.
• Each automation you create: its name, keywords, public reply, direct message and link.
• The ID, caption and link of any post you attach to an automation.

Post covers are loaded from Instagram when you open the dashboard and are not stored.

If you comment on a connected account

Instagram notifies us of comments on connected accounts. A comment that matches no active keyword is dropped without being saved. When a comment matches, we store:

• Your Instagram user ID and username.
• The text and ID of the comment, and the ID of the post.
• When it happened and whether the reply and the message were delivered.

We do not read your direct messages. We only send the automated message, and Instagram allows one per comment.

How the data is used

Only to run the automations, stop the same person receiving the same message twice within 24 hours, and show the account owner recent activity. We do not sell it, use it for advertising, or share it for anyone else's purposes.

Who else handles it

• Meta, which operates Instagram and delivers the comments, replies and messages.
• Our hosting and database providers, which process the data on our behalf.

These providers may process data outside your country.

Cookies

Two, and both are strictly functional: one keeps the owner logged in to the dashboard, and one lasts 10 minutes to secure the Instagram connection. There are no analytics or advertising cookies.

How long it is kept

Until the account is disconnected, which deletes the account, its token, its automations and its activity straight away, or until a person asks us to delete their data. Backups held by our database provider expire on that provider's schedule.

Legal basis and your rights

Where the GDPR applies, we process account owners' data to provide the service they asked for, and commenters' data on the basis of our legitimate interest in answering the request their comment makes.

You can ask to access, correct, export or delete your data, or object to its use, and you can complain to your data protection authority. To remove your data, follow these steps.

Contact

Francesco Morrone, francesco@strikt.fit. If this policy changes, we will update this page and its date.