Privacy Policy

Last updated October 3, 2026

SocialAutoReply ("we") lets businesses and creators send automated replies on Instagram and Facebook. This policy explains what we collect and why.

Account holders

• Your email address, used to log in with one-time codes and for service emails.
• Access tokens for the Instagram accounts and Facebook Pages you connect, used only to run your automations.
• Billing is handled by Stripe. We never see or store your card details.

People who interact with connected accounts

• Their platform-scoped user ID and username, and the comment or message text that triggered an automation.
• A log of automated messages sent to them, and whether they opened a link we sent.

We do not sell or share this data, and we don't use it for advertising. Activity logs are deleted automatically after 90 days.

Data deletion

Account holders can disconnect accounts and delete automations at any time from the dashboard. To delete all of your data, or if you messaged a business that uses SocialAutoReply and want your data removed, email privacy@socialautoreply.com. We complete requests within 30 days.

Infrastructure

The service runs on Cloudflare. Data is stored in Cloudflare D1 and encrypted in transit.