Template, not legal advice. This page is a starting point and must be reviewed by a qualified lawyer (including for India’s DPDP Act, 2023) before launch.

Privacy policy

Last updated: [DATE]. This policy explains what [COMPANY LEGAL NAME] (“we”) collects when you use ReplyLoop and how we use it.

Information we collect

  • Account data: your name, email address and a hashed password.
  • Instagram data you authorize: your professional account ID, username, profile picture, posts and Reels you choose, and an access token (encrypted at rest).
  • Comment data: for comments matching your keywords, the comment ID, text and commenter username, used to send the private reply and show your activity log. Comment text and usernames are deleted after [30] days. Raw webhook payloads are deleted after [14] days.
  • Billing data: subscription and payment status, amounts and invoice references from Razorpay. We never receive or store card numbers or CVVs.
  • Technical data: IP address and browser user agent for security, sessions and rate limiting.

How we use it

To provide the service you configure, secure accounts, process payments, provide support and meet legal obligations. We do not sell personal data.

Processors

Meta Platforms (Instagram API), Razorpay (payments), [HOSTING PROVIDER], [EMAIL PROVIDER].

Your rights and deletion

You can disconnect Instagram accounts or delete your account at any time in Settings. Removing the app from Instagram triggers deletion of your Instagram data; you can check status at /data-deletion. Contact support@example.com for access or correction requests.

Grievance officer

[NAME, EMAIL, ADDRESS], as required under applicable Indian law.