ReplyPilot privacy notice

Information used

• Customer account information such as email address and authentication records when you sign up or log in through the customer workspace.
• Connected professional Instagram account identifiers and necessary authorization credentials if Meta account linking is explicitly enabled and you approve it.
• Campaign configuration such as post IDs, matching keywords, draft messages, and campaign states.
• Comment content and delivery/diagnostic activity when authorized webhook ingestion or controlled testing is enabled.

How information is used

To authenticate users, maintain customer campaigns, operate approved account integrations, display delivery history, prevent duplicate actions, investigate failures, and support security and data requests. The public marketing pages themselves contain no third-party advertising trackers or analytics scripts.

Service providers

The backend is hosted using Render; customer authentication and application data use Supabase; Instagram integrations are provided through Meta. These providers process relevant data according to the features enabled and their applicable terms.

Access and storage

Customer workspace endpoints authenticate users and restrict account/campaign access by owner. Instagram tokens, when present, are handled server-side rather than published in the public website. No system is guaranteed to be risk-free.

Retention and deletion

Data may remain while accounts and operational records are needed for the beta, security, debugging or lawful retention obligations. The final public retention schedule is not yet published. Account deletion is not instantaneous or automatic. See how to request data deletion and contact the operator with questions.

Current status

Automatic Instagram DM delivery and subscription charging are not enabled for public customers. This notice will need final legal review and operator contact details before a public customer launch.