Privacy Policy

1. Introduction

Convly (“we”, “our”, “the service”) is a SaaS platform that enables users to automate comment replies and direct messages (DMs) on Instagram based on keyword triggers. This Privacy Policy explains how we collect, use, and protect your information.

2. Data We Collect

• Account Data: Your email address and password (encrypted) used during registration.
• Instagram Data: Your Instagram access token and Instagram User ID that you voluntarily connect through the Settings page.
• Content Data: Keyword rules (keywords, comment reply templates, DM templates) that you create within the platform.
• Log Data: Automation activity records including commenter usernames, matched keywords, action types, and status (success/failed).
• Technical Data: Basic server request information (timestamps, response status) for debugging purposes.

3. How We Use Your Data

• To run comment reply and DM automation according to your configured keyword rules.
• To display activity logs in your dashboard.
• To authenticate your account and maintain secure login sessions.
• To improve the performance and reliability of the service.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Instagram API Usage

Convly uses Meta's Instagram Graph API and Instagram Messaging API to send comment replies and direct messages on behalf of your Instagram account. We only access data necessary to perform these functions.

Your Instagram access token is stored securely and is only used to execute actions you have configured. You can revoke access at any time through the Settings page in Convly or directly through your Instagram account settings.

5. Data Storage & Security

Data is stored in Supabase (PostgreSQL) with Row Level Security (RLS) enabled, ensuring each user can only access their own data. All database connections use SSL/TLS encryption.

While we implement reasonable security measures, no system is 100% secure. You are responsible for keeping your account credentials confidential.

6. Data Retention

Your data is retained for as long as your account is active. If you delete your account, all associated data (including keyword rules, logs, and Instagram connections) will be permanently deleted within 30 days.

7. Your Rights

• Access the data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and all associated data.
• Revoke Instagram access at any time.

To exercise these rights, contact us at satriabahari.dev@gmail.com.

8. Policy Changes

We may update this policy from time to time. Significant changes will be communicated via email or a notification in the dashboard. Continued use of the service after changes constitutes your acceptance of the updated policy.

9. Contact

Questions or requests regarding this Privacy Policy can be sent to: satriabahari.dev@gmail.com