1. Introduction
Rplyflow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Instagram comment reply service.
By using Rplyflow, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use our service.
2. Information We Collect
2.1 Information from Instagram
When you connect your Instagram account, we access:
- Basic Profile Information: Your Instagram username, profile picture, and account ID
- Post Captions: The text content of your Instagram posts (used to learn your writing style)
- Comments on Your Posts: Comments left by others on your posts that you choose to reply to
- Business Account Information: Information about your connected Facebook Page
We do NOT access: Your private messages, follower lists, photos/videos content, or any personal information of your followers.
2.2 Information You Provide
- Account preferences and settings
- Payment information (processed securely by Stripe)
- Communications with our support team
2.3 Automatically Collected Information
- Usage data (features used, replies sent)
- Device and browser information
- IP address and approximate location
3. How We Use Your Information
We use the collected information to:
- Provide Our Service: Generate AI-powered reply suggestions that match your writing style
- Create Your Style Profile: Analyze your post captions to understand your tone, vocabulary, and communication style
- Post Replies: Submit replies to Instagram comments on your behalf when you approve them
- Process Payments: Handle subscription billing through Stripe
- Improve Our Service: Analyze usage patterns to enhance features and user experience
- Communicate: Send service-related notifications and respond to inquiries
4. AI Processing
Rplyflow uses artificial intelligence (powered by Anthropic's Claude) to generate reply suggestions. Here's how it works:
- Your post captions are analyzed to create a "style profile" - a summary of how you write
- When generating replies, we send the comment text and your style profile to the AI
- The AI generates suggested replies that match your communication style
- You always review and approve any reply before it's posted
We do not use your data to train AI models. Your content is processed only to provide you with reply suggestions.
5. Data Sharing and Disclosure
We share your information only in these circumstances:
5.1 Service Providers
- Meta/Instagram: To access your Instagram data and post replies via their API
- Anthropic: To process AI-generated reply suggestions
- Stripe: To process payments securely
- Railway: To host our application and database
5.2 Legal Requirements
We may disclose your information if required by law, court order, or governmental authority.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.
We never sell your personal information to third parties.
6. Data Retention
- Account Data: Retained while your account is active
- Style Profile: Retained while your account is active; deleted upon account deletion
- Comment Data: We do not permanently store comments; they are processed in real-time
- Usage Logs: Retained for up to 90 days for debugging and analytics
- Payment Records: Retained as required by law (typically 7 years)
7. Data Security
We implement appropriate technical and organizational security measures including:
- Encryption of data in transit (HTTPS/TLS)
- Encrypted database storage
- Secure token storage for Instagram access
- Regular security audits and updates
- Access controls and authentication
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
8. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your account and associated data
- Portability: Request your data in a portable format
- Revoke Access: Disconnect your Instagram account at any time
- Opt-out: Unsubscribe from marketing communications
To exercise these rights, contact us at [email protected]
9. California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information (we do not sell data)
- Right to non-discrimination for exercising privacy rights
10. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have rights under the General Data Protection Regulation including:
- Right to access, rectify, or erase your personal data
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
Legal Basis for Processing: We process your data based on your consent (when connecting Instagram), contractual necessity (to provide our service), and legitimate interests (to improve our service).
11. Children's Privacy
Rplyflow is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. Your continued use of the service after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Rplyflow
Email: [email protected]