Privacy Policy

Information we collect

We collect only what's necessary to provide the service:

• Instagram data: Your Instagram user ID, username, profile picture, and an access token issued by Meta. The access token is encrypted at rest.
• Service data: Rules you create (keywords, reply text, A/B variants), events we process (comments that triggered a rule, DM delivery status, error reasons, applied delays), schedule preferences (timezone, quiet hours, vacation), per-variant performance counters, and monthly DM and AI usage counters.
• Billing data: If you subscribe to a paid plan, payment is processed by Lemon Squeezy (our Merchant of Record). We receive your subscription status, plan, and renewal date. We do not receive or store full card details.
• Technical data: IP address, browser user agent, and timestamps of sessions. Used for security and debugging only.

How we use your information

We use your data to:

• Reply to Instagram comments and send DMs on your behalf based on rules you define
• Enforce plan limits (e.g. monthly DM quota)
• Process subscription payments and provide customer support
• Detect abuse, prevent fraud, and improve reliability

Who we share with

We share your data only with trusted providers needed to run the service:

• Meta Platforms: We call the Instagram Graph API on your behalf to read comments and send replies. Your interactions with Meta are subject to Meta's own privacy policy.
• Lemon Squeezy: All payments are processed by Lemon Squeezy. They store your billing address and card details under their privacy policy.
• Infrastructure providers: Our application is hosted on cloud infrastructure. These providers process data on our behalf under data-processing agreements.
• AI provider (optional): When AI features are enabled, Replio sends the text needed for the task to OpenAI. This can include draft replies, rule goals and keywords, comments, attributed inbound replies, profile bio and recent captions. It is used to draft replies, suggest keywords or classify responses. The data sent depends on the feature. The operator can disable AI features.

We do not sell your data. We do not share it for advertising. We do not use it to train our own AI models.

How long we keep data

We retain data while your account is active. When you delete your account, we remove personal account data from our active system. Anonymized deletion records demonstrate that requests were processed. Payment providers and legally required records may have separate retention periods.

Cookies

We use a single session cookie to keep you signed in. We do not use advertising cookies, third-party trackers, or analytics scripts that profile you.

Your rights

Under GDPR and similar laws, you have the right to:

• Access your data: Your dashboard shows rules, events, usage and billing. You can request additional information by email.
• — Delete your data: Use the Delete account page at any time. We also honor Meta's data deletion callback if you remove Replio from your Instagram account.
• Export your data: Email us at replio@jocage.com and we'll send you a machine-readable export within 30 days.
• Object or complain: You can object to processing by deleting your account. You can also lodge a complaint with your local data protection authority.

Security

Data is transmitted over TLS. Access tokens are encrypted at rest. We apply the principle of least privilege to internal access. No system is 100% secure — if we discover a breach affecting you, we'll notify you within 72 hours.

International transfers

We may process data outside your country of residence (e.g. EU → US for hosting or payments). We rely on Standard Contractual Clauses or equivalent safeguards where required.

Children

Replio is not intended for users under 18. If we learn we've collected data from a child, we'll delete it.

Changes to this policy

We may update this policy as the product evolves. Material changes will be announced via email or in-app. The "Last updated" date above always reflects the latest revision.

Contact

Questions about privacy? Email replio@jocage.com.