Auto Social — Privacy Policy
Last updated: 30 July 2026
Auto Social lets an Instagram professional account owner send automatic replies to direct messages they receive. This policy describes what the app stores, why, and how to have it removed.
What we collect
Only what the automation needs, and only after you explicitly connect your Instagram account:
- Instagram profile details — your account ID, username, account type, profile picture URL, and follower and media counts.
- An Instagram access token, so the app can read incoming messages and send replies on your behalf.
- Direct messages involving your account — message text, attachment references, the sender's Instagram-scoped ID, and timestamps. Inbound messages and the replies we send are both recorded.
- The automation rules you create — keywords and the reply content you configure.
What we do not do
- We do not sell, rent, or share your data with advertisers or data brokers.
- We do not use your messages to train machine learning models.
- We do not read or send messages for any account other than the ones you have connected.
Why we store it
Messages are stored so that a rule can be matched against them, so a message is never replied to twice, and so you can see what the automation has sent. Tokens are stored because replies are sent in the background, when the app is not running.
Where it is stored
All data is held in a Supabase-hosted Postgres database. Access tokens and message history are restricted to the server: they are not readable by other users of the service. Messages travel to and from Instagram over HTTPS.
Third parties
- Meta Platforms — Instagram's own API, which delivers your messages to us and sends your replies.
- Supabase — database and server hosting.
No one else receives your data.
How long we keep it
Until you remove it. If you disconnect Auto Social from your Instagram account, the access token stops working immediately and automation stops. Your stored history is kept until you ask for it to be deleted, so that reconnecting does not lose your configuration.
Deleting your data
Two ways, both of which erase your profile record, tokens, message history, and automation rules:
- In Instagram, open Settings and privacy → Apps and websites, then remove Auto Social. This notifies us automatically.
- Email asimparvez_91@hotmail.com and ask for deletion. Include your Instagram username.
Requests made through Instagram are handled automatically and return a confirmation code you can use to check the status of the request.