Privacy Policy

1. Introduction

GravityReply ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Instagram automation platform. By connecting your Instagram Professional account to GravityReply, you agree to the practices described in this policy.

2. Information We Collect

To provide our automation services, we collect specific information via the Instagram Graph API and Meta OAuth:

• Profile Information: We collect your Instagram User ID, username, and account type to identify your account and manage connections.
• Authentication Tokens: We securely store OAuth access tokens provided by Meta to perform actions on your behalf (e.g., replying to comments or sending messages).
• Interaction Data: We receive webhook notifications for comments and messages sent to your account to determine if they match your configured automation keywords.

3. Instagram Permission Scopes

GravityReply requests only the minimum permissions necessary to provide its automation services. Below is each permission scope we request and why:

• instagram_business_basic: Allows us to read your Instagram Professional account profile information (user ID, username, account type). This is required to identify and connect your account.
• instagram_business_manage_comments: Allows us to read comments on your posts and reply to them on your behalf. This powers the comment-trigger automation feature where GravityReply automatically replies to comments matching your configured keywords.
• instagram_business_manage_messages: Allows us to read and send direct messages on your behalf. This powers the DM automation feature where GravityReply sends automated direct messages triggered by comments or incoming messages. It also enables follow verification via the User Profile endpoint.

We do not request or use any permissions beyond these three scopes.

4. How We Use Your Information

We use the collected data strictly for the following purposes:

• To execute automated replies based on the keywords and messages you configure in your dashboard.
• To maintain your connection with the Instagram Platform.
• To provide customer support and troubleshoot technical issues.

We do not sell your data to third parties or use it for advertising purposes.

5. Data Retention and Security

We use access controls, HTTPS, and restricted operational access to protect account data. We retain connected-account details, access tokens, and automation settings only while your account remains connected. Disconnecting removes the connected account record and its automation settings from our active database.

6. Your Rights and Data Deletion

You have the right to access, update, or delete your data at any time. You can disconnect your account and delete your data directly through the "Settings" section of your dashboard. For detailed instructions, please visit our Data Deletion Instructions page.