Privacy policy
Effective date and last updated:
Who we are
This site is run by ilramdhan.dev (“we”). It uses auto-reply-ig, an open-source tool that automatically replies to comments on our Instagram professional account and sends a private message (DM) to people who comment a keyword, for example to deliver a link they asked for. ilramdhan.dev decides how this site is used and is responsible for the data described here.
What we store
If you comment on one of our posts, Instagram sends the comment to this site. For each comment we process, we store:
- your Instagram-scoped user id and your Instagram username;
- the text of your comment, and the ids of the comment and the post;
- the keyword your comment matched, if any;
- whether our public reply and the private message were sent, skipped or failed (with an error code when something went wrong);
- when the comment was received and processed.
For the Instagram account connected to this site (ours), we store its Instagram account id, username, display name and profile picture link, and an access token that lets this site reply and send messages on its behalf. The token is encrypted.
We do not read your other messages, and we never receive your password, email address or phone number. Public pages like this one use no analytics or advertising cookies; a sign-in cookie is used only for our own dashboard.
Why we use it
- to reply to your comment in public and send you the message you asked for by commenting;
- to avoid sending you the same message twice;
- to see how many comments, replies and messages each post gets.
We don't use your data for advertising or profiling, and we don't sell it.
Who we share it with
- Meta (Instagram): replies and messages are sent through Instagram's official API. Meta's own privacy policy covers your use of Instagram.
- Hosting providers that run this site and its database store and process the data on our behalf, and only to provide this service.
- If we use our own automation tools (such as a self-hosted n8n workflow), comment notifications may pass through them.
We don't sell, rent or share your data with anyone else.
How long we keep it
We keep comment records until ilramdhan.dev deletes them or you ask us to delete them. When you ask, everything stored about your Instagram account is deleted. When the connected Instagram account is disconnected or removes this app, its access token is deleted straight away.
Security
Data is sent over HTTPS. Access tokens and other secrets are encrypted at rest, and the dashboard is protected by a password. Only ilramdhan.dev has access to it.
Your choices and deleting your data
You can ask to see, correct or delete the data we hold about you. See how to delete your data, or contact me@ilramdhan.dev.
Children
This service is not directed at children. Instagram requires users to be at least 13 years old.
Changes to this policy
If we change this policy, we'll update it on this page and change the date at the top.
Contact
Questions about this policy or your data: me@ilramdhan.dev.