AutoDM App (“we”) helps Instagram creators and businesses send automatic direct messages when someone comments or messages a keyword. This policy explains what data we handle, why, and your choices.
What we collect
- Your account: email address, optional name and a securely hashed password.
- Connected Instagram accounts: your Instagram professional account ID, username, profile picture and an access token from Instagram. Access tokens are stored encrypted.
- Your settings: the keywords, messages, links and post choices you create.
- Comments and messages sent to your account: when someone comments on your posts or messages your account, Instagram sends us the text, their Instagram-scoped ID or username, and which post it was on. We use this only to check for your keywords and send your reply.
- Activity log: for each event, the time, keyword, the person's username or ID, and whether the reply was sent.
- Leads and link taps: for each person who sends one of your keywords, their username or ID, the keyword, when they wrote, whether they tapped your link and whether they follow you (when you use Follow to unlock). This is shown only to you.
- Website analytics: on our public pages (not inside your dashboard) we use Google Analytics to count visits and see which pages are useful. It uses cookies; you can block them in your browser.
- Payments: handled by our payment provider. We never see or store your card or UPI details.
How we use it
Only to run the service: matching keywords, sending your replies through the official Instagram API, showing your dashboard, billing you and keeping your account secure. We don't sell your data or use it for advertising. We share it only with providers that run the service for us (hosting, database, payments, email, website analytics) or when the law requires it.
How long we keep it
Activity logs are deleted automatically after 30 days, link-tap records after 90 days, and leads when you disconnect the Instagram account. Keywords and connected accounts are kept until you delete them. Disconnecting an Instagram account deletes its token and logs straight away; a backup of its keywords and leads is kept for 30 days so you can restore it, and you can delete backups yourself any time. Daily backups are kept for up to 30 days. Deleting your account deletes all of your data, including backups.
Your choices
- Disconnect an Instagram account from your dashboard, or remove the app in Instagram → Settings → Website permissions → Apps and websites.
- Delete your account and all data from the dashboard (Account → Delete my account).
- Read the data deletion instructions.
Security
Passwords are hashed, Instagram tokens are encrypted, and all traffic uses HTTPS. We never see your Instagram password.
Contact
Questions or requests: [email protected].