Privacy Policy

This policy covers the Replypine website and web application. It does not cover Instagram itself, or any other site we link to — those are governed by their own policies.

It applies to you whether you are a registered user, or someone who messaged a business that uses our product.

If you messaged a business using Replypine, that business decides what automations run and what happens to your conversation; we process it on their behalf. Contact that business first, or us at [email protected] and we will pass it on.

Account data you give us: your email address, your name if you provide one, and your password (stored only as a cryptographic hash — we never see it).

Instagram data, only after you explicitly connect an Instagram account and only within the permissions you grant:

• Your Instagram professional account profile — account ID, username, profile picture, follower count.
• Direct messages sent to and from your account, so automations can reply to them.
• Comments on your posts, so automations can respond to them.
• Metadata about your posts — captions, media IDs, timestamps, and engagement counts.

Content you create in the product: automations, scheduled posts, message templates, and knowledge-base entries.

Technical data: IP address, browser type, and pages visited, used to keep the service running and secure.

Replypine works only with Instagram. We do not connect to, or collect data from, any other social network.

We do not sell your data. We do not use your messages or content to train our own machine-learning models, and we do not build advertising profiles.

We do not collect payment card numbers. Payments are handled by our payment provider and card details never reach our servers.

To run the automations you build — replying to comments and direct messages on your behalf, exactly as you configured.

To publish and schedule the posts you create.

To show you analytics about your own account and automations.

To authenticate you, provide support, prevent abuse, and meet legal obligations.

Some features generate text — suggested replies, captions, and automation drafts. To produce them, the relevant content is sent to a third-party AI provider (OpenAI) for processing and a result is returned.

Only the content needed for that specific request is sent. It is not used to train the provider's public models under the terms of our commercial agreement with them.

AI-generated text may be wrong. You are responsible for reviewing anything sent to your audience on your behalf.

If you sign in using a third-party provider, we receive only your name and email address from them — enough to create and identify your account. We never receive your password.

Connecting an Instagram account for automation is a separate, explicit step from signing in. Signing in does not grant us access to your Instagram content.

You can revoke a sign-in provider at any time from that provider's own account settings.

We use a small number of cookies, and only for things the product cannot work without:

• Authentication — keeps you signed in between pages.
• Preferences — remembers your language and which connected account you are viewing.
• Security — protects against cross-site request forgery.

We do not currently run third-party advertising or analytics cookies. If we ever add analytics, it will be behind a consent choice you can decline, and declining will not limit the product.

You can clear or block cookies in your browser, but signing in will stop working without the authentication cookie.

We share data only with providers that operate parts of the service on our behalf, and only as far as they need it:

• Meta Platforms — to read and send Instagram messages and comments, under your granted permissions.
• OpenAI — AI text generation, as described above.
• Our hosting and database providers — to store and serve the application.
• Our authentication provider — to manage sign-in and passwords.
• Our payment provider — to process subscriptions.

We also disclose data where the law requires it, or to protect our rights, users, or the safety of others.

We keep your account data while your account is open.

When you delete your account, we begin deletion after a 30-day grace period, which exists so an accidental or unauthorised deletion can be reversed. During that window you can cancel the request from within the product.

Automation execution records are pruned automatically after 30 days. Some records — such as billing and security audit logs — are kept longer where the law requires, and are anonymised so they are no longer linked to you.

You can access, correct, export, or delete your data at any time.

To delete everything: open the product, go to Settings → Account → Delete Account, and confirm. This removes your account, your Instagram connection, your automations and your collected contacts.

You can also disconnect an Instagram account on its own, at any time, from Connected Accounts — this stops all access immediately without deleting your Replypine account.

You can revoke our access directly from Instagram: Settings → Website Permissions → Apps and Websites.

If you prefer, email [email protected] and we will action the request. See our Data Deletion page for full instructions.

Our servers are located in the European Union. Some providers we rely on — including our AI provider — process data outside it.

Where data leaves the region, we rely on the safeguards in our agreements with those providers to protect it.

We do not make decisions with legal or similarly significant effects about you by automated means.

The automations you build send messages automatically, but you define them, you turn them on, and you can stop them at any time.

Access tokens and third-party credentials are encrypted at rest. Traffic is encrypted in transit. Access to production systems is restricted.

No system is perfectly secure. If a breach affects your data, we will notify you as required by law.

Replypine is a business tool and is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect their data; if we learn we have, we delete it.

If we make a material change, we will update the date below and notify account holders.

Questions or requests: email [email protected].