Privacy Policy
Last updated: August 14, 2026
DMLoop (“we”, “us”) provides a tool that turns Instagram comments, story replies, and mentions into automated direct messages. This policy explains what data we collect, how we use it, and the choices you have. It applies to our website and application.
Data controller
The data controller for personal information collected through DMLoop is IvoryTusk Technologies Private Limited, a company incorporated under the Companies Act, 2013 (CIN U62020GJ2025PTC163430, GSTIN 24AAICI2354L1ZG), with its registered office at:
IvoryTusk Technologies Private Limited1201, Stavan, Rangraag, Residency Jahangirpura,
Bhesan, Surat – 395005, Gujarat, India
You can reach us at contact@ivorytusk.co.in or +91 84690 92075.
Information we collect
- Account information — your name, email address, and password (stored hashed) when you create a DMLoop account.
- Instagram data — when you connect an Instagram Business or Creator account, we access, via Meta’s official APIs and the permissions you grant: your Instagram profile (username, name, profile picture, account type), your media (posts, reels, stories) and their metrics, comments on your content, and direct messages exchanged through the automations you configure.
- Contacts & leads — the Instagram users who interact with your automations, including their username, the content of their comment or message, and any email or phone number they choose to submit through a lead-capture step.
- Usage data — automation activity, message delivery and link-click events, and basic technical logs needed to operate and secure the service.
How we use your information
- To deliver the core service — receiving Instagram events and sending the replies and DMs you configure.
- To show you analytics about your automations, audience, and link performance.
- To maintain, secure, and improve the service and to provide support.
- To comply with our legal obligations and Meta’s Platform Terms.
We do not sell your personal data, and we do not use your Instagram content or messages for advertising.
How we store and protect data
Instagram access tokens are encrypted at rest. Webhook events are verified for authenticity before processing. Access to production data is restricted to authorized personnel. While no system is perfectly secure, we take reasonable measures to protect your information.
Payment information
Payment card and bank-account details are never stored on our servers. All payment information is collected and processed by one or more third-party payment service providers, payment aggregators and/or payment gateways licensed by the Reserve Bank of India, over PCI-DSS-compliant channels. We receive only the outcome of a transaction and the billing details you enter on your invoice — never your full card number.
Data sharing
We share data only with infrastructure providers that help us run the service (for example, hosting, database, and queue providers) under appropriate confidentiality obligations, and with Meta as required to operate the Instagram integration. We may disclose information if required by law.
Data retention and deletion
We keep your account data for as long as your account is active. Beyond that, data expires on a schedule rather than being kept indefinitely:
- Automation, execution, and comment history is purged after 180 days; link-click records after 365 days.
- The name, email address, and phone number of a captured contact are erased after 365 days with no further activity from that person.
You can disconnect an Instagram account at any time from within the app, which stops further processing. You can request deletion of your account and associated data at any time — see our Data Deletion instructions.
Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data. To exercise these rights, contact us at contact@ivorytusk.co.in. We respond within 30 days.
Children
The service is not directed to anyone under 13 (or the minimum age in your jurisdiction).
Changes to this policy
We may update this policy from time to time. We will update the “Last updated” date above when we do.
Contact
Questions about this policy or your data? Email us at contact@ivorytusk.co.in, call +91 84690 92075, or write to us at:
IvoryTusk Technologies Private Limited1201, Stavan, Rangraag, Residency Jahangirpura,
Bhesan, Surat – 395005, Gujarat, India