Privacy Policy

Who this covers

This policy describes how the application handles information belonging to people who comment on, or send messages to, the Instagram accounts it manages. Throughout, "we" means DATASARVA LLC, operating aisarva, at 117 South Lexington Street, Harrisonville, MO 64701-2444, United States.

What we receive

We receive webhooks from Meta for comments, mentions and messages on our accounts. These notifications and related API responses may contain:

• comment, mention or message content
• the person's Instagram username and an app-scoped user identifier
• post, media and conversation identifiers, and timestamps

If someone sends us a direct message, we receive the message content and the same app-scoped identifier.

We also process our own account identifiers, media and publishing metadata, scheduled posts and trial reels, and account and media insights supplied by Meta (such as reach, views and engagement). App-scoped IDs identify a person within this app rather than across unrelated apps.

We do not browse profiles, collect follower lists, scrape data, or gather anything about a person beyond what they voluntarily send to our accounts.

Why we use it

• To publish reels and posts, including trial reels and scheduled posts, to our own accounts.
• To read account and media insights and understand how our content performs.
• To process comment, mention and message webhooks for these functions.
• To reply publicly to comments on our posts.
• To send a direct message containing requested content — only when a person explicitly asks for it by replying with a keyword. We do not send unsolicited messages.
• To avoid repetition, by recording that a given person has already received a reply for a given post.
• To moderate, by reading, hiding or deleting comments on our own posts, including spam or abusive comments.

We do not use this information for advertising, profiling, scoring, or automated decisions that produce legal or similarly significant effects.

Where it is stored

Data is stored in a local database on a private machine controlled by the operator. It is not hosted with a third-party analytics provider, not copied to a cloud database, and not accessible over the public internet.

Who we share it with

We do not sell, rent, trade, or disclose this information to third parties other than Meta. It is not used to train machine-learning models. The only party it is exchanged with is Meta, which is where it originates and where our replies are delivered.

How long we keep it

• Comment and message content: deleted after 90 days.
• Reply records (that a reply was sent to a person for a post, without the message content): retained up to 12 months, so we do not message the same person repeatedly.

Your rights

You may ask us to tell you what information we hold about you, correct it, or delete it. Email [email protected] from the address associated with your request, or send a direct message to the Instagram account concerned, and we will respond within 30 days.

Deleting your comment on Instagram also removes our access to it.

Depending on your location and applicable law, the GDPR may provide rights to access, correction, deletion, portability, restriction, objection and withdrawal of consent, and to complain to a supervisory authority. The CCPA may provide rights to know, access, correct and delete information, opt out of sale or sharing, limit use of sensitive information and exercise rights without discrimination. We do not sell information or share it for advertising. India's DPDP Act provides for access, correction, erasure, grievance redressal and nomination, subject to its applicable commencement dates. We honour access and deletion requests regardless of location. See our data deletion instructions for how to request deletion.

Children

Our accounts and this tool are not directed at children under 13, and we do not knowingly retain information from them. If you believe we hold such information, contact us and we will delete it.

Security

Data is kept on the operator's private machine. Access is limited to the operator; we take reasonable measures to protect it against unauthorized access or disclosure.

Changes

If this policy changes materially we will update the date at the top of this page. The current policy will remain available at this URL. Changes do not waive your privacy rights.

Contact

DATASARVA LLC, operating aisarva
117 South Lexington Street, Harrisonville, MO 64701-2444, United States
[email protected]