Who this applies to
- Account users: people who sign in to the AutoDm dashboard to manage a connected Instagram account.
- Instagram users: people who comment on, reply to a story of, or send a direct message to an Instagram account connected to AutoDm.
Data we store
- Account users: email address (for sign-in links), workspace and team membership, and the settings of the campaigns you create.
- Connected Instagram accounts: account ID, username and an access token issued by Meta. The token is encrypted at rest.
- Instagram users: the Instagram-scoped user ID Meta provides, the username when Meta includes it, the text of comments and messages that reach the connected account, a log of the messages AutoDm sent in reply, and any tags and custom field values (for example a business type or an email address) that the account owner records for them.
- Link clicks: when someone opens a tracked link sent by AutoDm, we record the time, browser user agent, referrer and a one-way hash of the recipient and of the IP address, to count unique clicks. Raw IP addresses are not stored.
- Operational data: webhook payloads received from Meta and error logs, used to deliver each message exactly once and to fix problems.
How we use it
Only to run the service: match comments and messages against the account owner's campaigns, send the replies they set up, avoid duplicate messages, show the account owner their messages and statistics, and keep the service secure. We do not sell data, use it for advertising, or share it with anyone other than the processors below.
Instagram and Meta
AutoDm never asks for Instagram passwords, does not scrape Instagram and does not use browser automation. It acts only through the official Meta APIs, within the permissions the account owner granted, and follows Meta's messaging rules, including the 24-hour messaging window.
Processors
- Meta Platforms (Instagram APIs), to receive and send messages.
- Hostinger, which hosts the server that runs AutoDm and its database.
- Cloudflare (R2 storage), for database backups.
- Resend, to deliver account emails (password setup and reset, invitations).
Retention and deletion
Data is kept while the connected account uses AutoDm. When a deletion request is completed, the data is removed from the live database straight away and leaves our backups within 30 days, when they expire. See the Data deletion page for how to ask.
Your rights
You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Email contact@alielmowed.com.
Contact
Ali El Mowed, contact@alielmowed.com.