Privacy Policy

Last Updated: February 13, 2026

1. Introduction

NanoReply ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and use our Instagram DM automation service.

2. Data We Collect

Information You Provide:

  • Email address
  • Instagram Business account credentials (via OAuth)
  • Instagram profile information

Automatically Collected Data:

  • Instagram direct messages (inbound and outbound)
  • Message metadata (timestamps, sender information)
  • Usage data and analytics

3. How We Use Your Data

We use your personal data to:

  • Provide and maintain our Instagram DM automation service
  • Connect to your Instagram Business account via OAuth
  • Process and respond to incoming messages based on your automation rules
  • Log message history for your reference
  • Improve our services and develop new features
  • Communicate with you about service updates

4. Instagram/Meta Integration

Our service integrates with Instagram's platform via the Meta/Facebook API. When you connect your Instagram Business account:

  • We receive authorization tokens to access your Instagram messages
  • Your Instagram data is processed according to Meta's terms of service
  • We only access data necessary for providing our automation service
  • We do not sell or share your Instagram data with third parties

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal data:

  • Data is encrypted in transit and at rest
  • Access tokens are stored securely and rotated regularly
  • Our infrastructure is hosted on Fly.io with industry-standard security
  • Regular security updates and monitoring

6. Your Rights

You have the right to:

  • Access your personal data
  • Request deletion of your account and associated data
  • Update your account information
  • Disconnect your Instagram integration
  • Export your message logs
  • Withdraw consent at any time

7. Data Retention

We retain your personal data only as long as necessary to provide our services and as required by law. When you delete your account, we will permanently delete all associated personal data within 30 days, unless required to retain it for legal or security reasons.

8. Third-Party Services

We use the following third-party services:

  • Meta/Facebook: Instagram API for message access and automation
  • Fly.io: Cloud hosting and infrastructure
  • PostgreSQL: Data storage

Each third-party service operates independently and has its own privacy policy. We encourage you to review their policies.

9. Cookies and Tracking

We use essential cookies to authenticate users and maintain session state. We do not use tracking cookies or share your data with advertising networks. You can manage cookie preferences through your browser settings.

10. Children's Privacy

Our service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

11. International Data Transfers

Your data may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our service, you consent to such transfers.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date. You are advised to review this privacy policy periodically for any changes.

13. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us:

  • Email: hello@enchantinglabs.com
  • Website: https://nanoreply.com