Privacy Policy

Last updated: May 17, 2026

InstaReply ("we", "our", or "us") is operated by Orion Dijital, based in Türkiye. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

1. Information We Collect

When you use InstaReply, we may collect the following types of information:

• Account Information: When you connect your Instagram Business or Creator account via Meta's official OAuth, we receive your Instagram user ID, username, profile picture, and account type.
• Device Information: We collect a unique device identifier to manage your account and prevent abuse. On Android, this is the Android ID; on iOS, a securely stored UUID.
• Usage Data: We collect information about how you interact with the app, including rules created, credits used, and features accessed.
• Instagram Data: Through the official Meta API, we access your Instagram comments and messages solely to provide automation services. We do not store the content of comments or messages beyond what is necessary for processing.
• Subscription Information: Payment processing is handled entirely by Apple (App Store) or Google (Google Play). We do not collect or store any payment card information.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the InstaReply service
• Process your automation rules (comment replies and DMs)
• Track credit usage and manage your subscription
• Send you push notifications about your automation activity (daily summaries, credit warnings)
• Improve and optimize our app and services
• Detect and prevent fraud or abuse

3. Instagram Data Usage

InstaReply uses the following Instagram permissions through the official Meta Business API:

• instagram_business_manage_comments: To read comments on your posts and automatically reply based on your configured rules.
• instagram_business_manage_messages: To send automated direct messages to users who interact with your content.

We access Instagram data only when your automation rules are triggered. We do not sell, share, or use your Instagram data for advertising purposes. Data is processed in real-time and not stored beyond operational necessity.

4. Data Storage and Security

Your data is stored on secure servers located in Europe (Hetzner, Germany). We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL) and at rest.

5. Data Sharing

We do not sell your personal information. We may share data only with:

• Meta Platforms: To process Instagram API requests on your behalf
• RevenueCat: For subscription management (anonymized user IDs only)
• OneSignal: For push notification delivery
• Law Enforcement: When required by applicable law

6. Data Retention

We retain your account data for as long as your account is active. If you disconnect your Instagram account or uninstall the app, your data will be deleted within 30 days. You can request immediate deletion by contacting us.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Disconnect your Instagram account at any time through the app settings
• Revoke Instagram permissions through your Meta account settings

8. Children's Privacy

InstaReply is not intended for use by individuals under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date and, where appropriate, through in-app notifications.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Email: support@insta-reply.com
• Support Page: insta-reply.com/support

Orion Dijital — Türkiye