Privacy Policy

InstaFlow AI is a SaaS platform that helps creators, businesses, and teams manage Instagram DM automation, lead capture, auto-replies, automation workflows, analytics, and Instagram account management. This policy explains how we handle information when you create an account, connect an Instagram account, and use our services.

We collect information needed to provide, secure, and improve InstaFlow AI.

• Name and profile information you provide during account registration.
• Email address and authentication information used to manage your account.
• Account information such as plan status, workspace settings, and support requests.
• Instagram account identifiers, usernames, Facebook Page identifiers, and related account metadata.
• OAuth access tokens granted through Meta and Instagram authorization flows.
• Usage analytics such as automation activity, account connection events, and product feature usage.
• Device and browser information such as IP address, user agent, operating system, and session details.

We use collected information only for legitimate product and operational purposes.

• Authentication, account access, and user identity verification.
• Instagram account connection and permission-based access to Instagram Business or Creator account data.
• Automation execution, including auto-replies, DM workflows, lead capture, and account sync operations.
• Analytics, reporting, usage limits, and account performance insights.
• Customer support, troubleshooting, service messages, and account communication.
• Security monitoring, abuse prevention, fraud detection, audit logging, and platform integrity.

InstaFlow AI may receive data through the Instagram Graph API and related Meta platform services after you grant permissions. This may include Instagram account identifiers, usernames, linked Facebook Page information, profile details, conversations, messages, comments, lead-related data, and automation events, depending on the permissions you approve.

We use Instagram and Meta data only to provide the automation services you request, such as connecting accounts, running DM workflows, retrieving lead information, syncing account data, and displaying analytics. We do not sell user data, Instagram data, OAuth tokens, conversations, lead data, or account identifiers. We use Meta platform data in accordance with the permissions granted by the user and Meta Platform Terms.

We use technical and organizational safeguards designed to protect user and Instagram data. OAuth tokens and sensitive integration data are stored using encrypted storage. Access to production systems is restricted through access controls, secure authentication, audit practices, and least-privilege operational access.

InstaFlow AI is served over HTTPS in production. We use secure application architecture, backend validation, database controls, and monitoring to help protect against unauthorized access, alteration, disclosure, or destruction of data.

We retain account information for as long as your InstaFlow AI account remains active or as needed to provide the service. Instagram connection data and OAuth tokens are retained while your Instagram account remains connected. Automation, analytics, audit, billing, and support records may be retained for legitimate business, security, compliance, and accounting purposes.

When you disconnect an Instagram account, delete your InstaFlow AI account, or request deletion, we delete or de-identify personal data unless retention is required for legal, security, dispute resolution, or compliance reasons.

You may contact us to exercise privacy choices related to your data.

• Request access to personal information associated with your account.
• Request correction or deletion of eligible account data.
• Disconnect an Instagram account from InstaFlow AI.
• Delete your InstaFlow AI account.
• Ask questions about how we process Instagram, Meta, and account data.

InstaFlow AI uses trusted third-party providers to operate the service. These providers may process limited data as needed to host, secure, deliver, and support the platform.

• Meta and Facebook for authentication, permissions, Facebook Pages, and platform services.
• Instagram Graph API for permission-based Instagram account data and automation functionality.
• Resend for transactional email delivery.
• Vercel for frontend hosting and delivery.
• Render for backend hosting and operational infrastructure.
• PostgreSQL provider for database storage and application persistence.

We use cookies, local storage, and similar technologies for session management, authentication, security, and product functionality. These technologies help keep users signed in, protect accounts, remember application state, and support secure access to InstaFlow AI. You may control cookies through your browser settings, but disabling them may affect authentication and core product features.

For privacy requests, account deletion requests, or questions about this Privacy Policy, contact us at rajkishor36036@gmail.com.

This Privacy Policy was last updated on June 18, 2026.