Privacy Policy

1. Information We Collect

When you register for and use FastReply, we collect specific categories of information necessary to deliver and maintain our services:

• Account & Workspace Information: Your name, email address, password hash or authentication provider credentials, and organization/workspace configurations.
• Meta & Instagram Integration Data: When you connect an Instagram Professional account via Meta OAuth, we receive authorized account identifiers (Page ID, Instagram Business Account ID, account username) and short/long-lived access tokens.
• Automation & Campaign Configuration: Keyword trigger rules, post identifiers, private reply message templates, public reply templates, and target destination URLs.
• Webhook & Interaction Data: Real-time webhook events delivered by Meta, including comment timestamps, commenter usernames or scoped IDs, comment text (for keyword matching), and message delivery receipts.
• Link Tracking & Analytics: Aggregated and anonymized data relating to link clicks generated via FastReply redirect links (/r/[slug]), including timestamps, user agent headers, and referral domains.

2. What We Never Collect

We hold your trust and account safety as our highest priority:

• We never request, collect, or store your Instagram password.
• We never use unofficial scraping tools, browser extensions, or reverse-engineered APIs.
• We do not monitor, read, or catalog your personal, non-automated private direct message conversations.
• We never sell, rent, or trade your audience data, contact lists, or leads to any third parties or advertisers.

3. How We Use Your Information

We process collected information strictly for legitimate business and platform operational purposes:

• To authenticate your identity and administer your account.
• To match comment keywords on your posts and deliver requested private DMs via official Meta Graph API endpoints.
• To provide real-time deliverability logs, error diagnostics, and campaign performance analytics in your dashboard.
• To enforce Meta rate limits and prevent duplicate automated message dispatches.
• To communicate service updates, operational notices, and security alerts.

4. Meta Platform & Data Security Compliance

FastReply connects exclusively through Meta's official Graph API (v25.0) under Meta's Developer Terms and Policies. All access tokens received from Meta are encrypted at rest using industry-standard AES-256-GCM encryption. Communication between your browser, our cloud infrastructure, and Meta's servers is enforced via TLS 1.3 encryption.

5. Data Retention & Deletion

We retain your data only for as long as your workspace account remains active. You maintain total control over your data:

• Self-Service Disconnection: You can disconnect your Instagram account at any time in your workspace settings, which immediately revokes and purges active connection tokens.
• Complete Purge: You may request full deletion of all workspace data, logs, and account details by following the instructions on our Data Deletion page.

6. Third-Party Service Providers (Subprocessors)

We work with trusted third-party infrastructure providers who adhere to strict data security agreements solely to host and operate the platform (e.g., cloud hosting, managed databases, message queue systems, and transactional email deliverability). Subprocessors are strictly prohibited from using your data for any independent purposes.

7. Your Privacy Rights (GDPR & CCPA)

Depending on your location, you may have rights under applicable data protection regulations (such as GDPR or CCPA), including:

• The right to access and receive an export of your personal information (CSV/JSON).
• The right to rectify inaccurate or incomplete information.
• The right to erasure ("Right to be Forgotten") of your personal data.
• The right to restrict or object to the processing of your data.

8. Changes to this Policy

We may update this Privacy Policy periodically to reflect enhancements in our product, regulatory compliance, or Meta platform policies. Any material modifications will be noted with an updated effective date.

9. Contact Us

If you have questions, inquiries, or requests concerning this Privacy Policy or how your data is handled, please reach out to us at privacy@fastreply.app.