Privacy Policy

DMLoop (“we”, “us”) provides a tool that turns Instagram comments, story replies, and mentions into automated direct messages. This policy explains what data we collect, how we use it, and the choices you have. It applies to our website and application.

Information we collect

• Account information — your name, email address, and password (stored hashed) when you create a DMLoop account.
• Instagram data — when you connect an Instagram Business or Creator account, we access, via Meta’s official APIs and the permissions you grant: your Instagram profile (username, name, profile picture, account type), your media (posts, reels, stories) and their metrics, comments on your content, and direct messages exchanged through the automations you configure.
• Contacts & leads — the Instagram users who interact with your automations, including their username, the content of their comment or message, and any email or phone number they choose to submit through a lead-capture step.
• Usage data — automation activity, message delivery and link-click events, and basic technical logs needed to operate and secure the service.

How we use your information

• To deliver the core service — receiving Instagram events and sending the replies and DMs you configure.
• To show you analytics about your automations, audience, and link performance.
• To maintain, secure, and improve the service and to provide support.
• To comply with our legal obligations and Meta’s Platform Terms.

We do not sell your personal data, and we do not use your Instagram content or messages for advertising.

How we store and protect data

Instagram access tokens are encrypted at rest. Webhook events are verified for authenticity before processing. Access to production data is restricted to authorized personnel. While no system is perfectly secure, we take reasonable measures to protect your information.

Data sharing

We share data only with infrastructure providers that help us run the service (for example, hosting, database, and queue providers) under appropriate confidentiality obligations, and with Meta as required to operate the Instagram integration. We may disclose information if required by law.

Data retention and deletion

We keep your data for as long as your account is active. You can disconnect an Instagram account at any time from within the app, which stops further processing. You can request deletion of your account and associated data at any time — see our Data Deletion instructions.

Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. To exercise these rights, contact us at general@ivorytusk.co.in.

Children

The service is not directed to anyone under 13 (or the minimum age in your jurisdiction).

Changes to this policy

We may update this policy from time to time. We will update the “Last updated” date above when we do.

Contact

Questions about this policy or your data? Email us at general@ivorytusk.co.in.