Privacy Policy — ReplyAmigo

01Who we are

ReplyAmigo is a tool that answers comments on your Instagram reels and sends the people who commented a direct message — for example, your link after they follow you. It works only through Instagram's official API and only on the Instagram professional (Business or Creator) account you connect.

In this policy, “you” means someone with an ReplyAmigo account, and “commenters” means the people who comment on your reels.

02What we collect about you

WhatWhy

Your email addressTo sign you in with a one-time code and to recognise your account

Name and profile photoShown in the app. Taken from Google or Facebook if you sign in with them, or the name you set in Settings

Linked Google / Facebook sign-inSo either one opens your account. We store which account is linked, not your password

Answers to the short onboarding surveyHow you heard of us, your role, your goals and your country — to understand who uses ReplyAmigo

Your Instagram accountAccount id, username, profile photo and an access token, so we can reply and send messages on your behalf

Your reelsEach automated reel's id, link, caption and thumbnail, so you can recognise it in the app

Your automationsThe keywords, replies, messages and links you write, plus counts of messages sent and buttons tapped

Your workspaces and teamWhich workspaces you belong to and your role, and the email addresses you invite — so the right people can get in

Feedback you sendYour message, its type and the page you sent it from — so we can read it, reply and, if it helps, thank you with a discount

03People who comment on your reels

When someone comments on a reel you've automated, ReplyAmigo keeps the minimum it needs to run your flow:

WhatWhy

Their Instagram user id and usernameTo reply to them and to avoid messaging the same person twice

The comment's id and when it was madeInstagram's rules let us send one private reply per comment, within 7 days

Where they are in your flowMessaged, asked to follow, or finished — this is what your analytics count

The last delivery error, if a message failedSo you can see why someone didn't get a DM

What we don't keep

The text of the comment is only checked for your keyword and isn't stored. Their display name and whether they follow you are looked up from Instagram at the moment a message is sent — to personalise it and to run the follow check — and aren't saved.

04How we use it

To run the automations you set up: public replies, direct messages and the follow check.
To show you your dashboard, analytics and each reel's results.
To sign you in and keep your account secure.
To fix problems — for example, spotting an expired Instagram connection.

We don't sell your data, use it for advertising, or train AI models on it. The help assistant answers from our help articles only and doesn't send your questions anywhere.

05Who we share it with

Only the services ReplyAmigo needs to work, each handling data for us and nothing else:

ServiceWhat for

Meta (Instagram)Reading comments, posting replies and sending messages through the official API

VercelHosting the app

Prisma PostgresThe database that stores the data described here

ResendEmailing your sign-in codes

Google, FacebookOnly if you choose to sign in with them

Your team. Everyone you invite to a workspace can see and manage its Instagram automations, reels and results — that's what an invite is for. Remove someone in Settings → Team and their access ends straight away.

We'll only share anything else if the law requires it.

06How long we keep it

Nothing in ReplyAmigo is erased the moment you remove it. Deleting an automation, removing a prepared flow or disconnecting Instagram hides the data and stops all activity, but keeps the records — so reconnecting the same account brings everything back as it was.

Your account and its data are kept while your account exists.
Deleting your account closes it after 30 days (log in before then to keep it). After that it can't be restored or used, and its records stay stored, marked as deleted — never used again.
Database backups are kept for 7 days, then deleted automatically.
Sign-in codes expire after 10 minutes and are only ever stored in scrambled (hashed) form.

How to deactivate or delete your account is under Your choices & deletion.

07Cookies & your browser

One sign-in cookie

Keeps you logged in. No advertising or tracking cookies, and no third-party analytics.

Stored in your browser

A few preferences, like whether the sidebar is collapsed, and drafts in the Automations preview. They stay on your device.

08Security

Everything travels over HTTPS.
Instagram connects through its own login — we never see or store your Instagram password.
Messages from Instagram are checked for Meta's signature, so nobody else can trigger your automations.
New accounts are approved by hand, and each account only ever sees its own data.

09Your choices & deletion

Pause any automation

Switch a reel off and nothing more is sent from it.

Disconnect Instagram

Settings → Instagram → Disconnect stops everything at once.

Get a copy

Ask and we'll send you the data we hold about you.

Deactivate or delete

Settings → Profile. Deactivating pauses everything until you log in again. Deleting closes your account after 30 days; its records are kept, marked as deleted.

Commenters

If you commented on a reel that uses ReplyAmigo and want your data removed, ask the creator who runs that reel, or contact us and we'll take care of it.

You can also remove ReplyAmigo's access from inside Instagram at any time: Settings → Apps and websites.

10Children

ReplyAmigo isn't meant for anyone under 13 — the same minimum age as Instagram — and we don't knowingly collect their data.

11Changes & contact

If this policy changes, we'll update it here and change the date at the top of the page.

Questions, or want your data deleted?

Message us on Instagram — a person reads every message.

@mkexplores_Help Center

Your data, in plain English.