Privacy Policy

1. What we collect

To reply automatically to comments and send direct messages, DirectFa stores only the following, obtained through Instagram’s official API after you explicitly grant permission:

• Your Instagram user ID (IGSID)
• Your Instagram handle and public profile name
• The comments and messages sent to your connected page, so they can be answered automatically and shown in your panel inbox
• The access tokens needed to send the automated replies

2. How we use it

That data is processed for these purposes only:

• Sending the automated replies your rules define to people who contact your page
• Posting public replies under your customers’ comments
• Showing you engagement and usage reports inside your own dashboard
• Storing sales leads, including phone numbers customers send you, for your follow-up

3. Security and service providers

We never sell your data or your customers’ data, and we never hand it to advertisers or data brokers. To run the service we rely on a small number of service providers — server hosting, an AI provider that processes message text solely to generate the replies you configured, an SMS service, payment gateways, file storage and encrypted off-site database backups — each bound to use the data only to provide that service to us. If a seller chooses to connect the API, webhooks or a CRM in the panel, that page’s data — such as leads, orders, receipts and bookings — is sent to the system the seller has named; we never turn this on without them, and keeping the data in that system is the seller’s responsibility. Connections are encrypted in transit, and off-site backups are encrypted with a key that never leaves us.

4. Requesting deletion of your data

Under Meta’s platform rules, you may request that everything DirectFa has stored about you be deleted.

For step-by-step instructions and to submit a request, see the data deletion guide or contact us at privacy@directfa.com .