Privacy Policy

What this app does

Inst Automation Bot helps a business respond to specific Instagram comments with automated private replies. It listens for comment webhooks sent by Meta, checks the configured reply rules, and records delivery and processing logs so the account owner can review what happened.

Information the app may receive

When the connected Instagram account uses this app, the service may receive or store the following categories of information:

• Instagram account identifiers connected to the app
• Comment details such as comment ID, comment text, media ID, and event timestamps
• Public profile details included in the webhook payload, such as the commenter’s username or Instagram user ID when Meta provides them
• Automation settings created by the account owner, including reply rules and default response text
• Technical logs needed to confirm webhook delivery, troubleshoot failures, and prevent duplicate sends

How the information is used

The information handled by the app is used only to operate the automation service. That includes validating webhooks, matching comments to configured rules, sending approved private replies, showing recent activity in the admin area, and diagnosing technical issues when something does not work as expected.

The app is not intended to build advertising profiles, sell user data, or enrich data from unrelated third-party sources.

When information is shared

The app relies on Meta’s platforms to receive Instagram webhook events and send replies. Information may therefore be processed by Meta as part of the normal operation of Instagram and Facebook developer products.

Information may also be handled by the hosting provider, database provider, or technical contractors strictly as needed to keep the service running, secure, and supportable. Those parties are expected to use the data only for service delivery and maintenance.

Data retention

Webhook events, logs, and rule settings may be retained for as long as needed to operate the automation, investigate delivery issues, or maintain a record of actions taken by the service. Data that is no longer needed should be removed in the ordinary course of maintenance.

Security

The service uses authenticated API requests, webhook signature checks, and access-controlled admin pages to reduce unauthorized access. No internet-connected system can promise perfect security, but the app is designed to limit access to the information needed to run the service.

Your choices

The business using this app controls whether the service is enabled, what reply rules are active, and whether test mode is used instead of live sending. If you are an Instagram user and believe your information has been handled incorrectly through this app, you can contact the operator using the email below.

Children’s privacy

This service is not designed for children and is not intentionally directed to them. It is built for business use in connection with Instagram professional account activity.

Updates to this policy

This policy may be updated when the app’s features, data flows, or legal obligations change. When that happens, the updated version will be posted at this URL with a revised effective date.