Privacy Policy

Afsar Yazılım ("we", "our", or "us") operates an Instagram DM automation platform that helps e-commerce businesses respond to customer messages via the official Meta Messenger API. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our service.

We collect the following categories of information:

• Account information: Your name, email address, and business details when you register.
• Instagram / Facebook data: Instagram Business Account ID, Page ID, and page access tokens obtained through the Meta Login flow. We do not collect or store personal data of your Instagram followers beyond what is necessary to route and reply to their messages.
• Message data: Incoming Instagram Direct Messages sent to your connected business account, and the automated responses we send on your behalf via the Meta Messenger API (messaging_type: RESPONSE). Messages are processed in real time and stored only to display conversation history to you.
• Usage data: Log data, API response times, and feature usage statistics for service improvement.

• To provide and operate the chatbot automation service.
• To send automated replies to Instagram DMs on your behalf using the official Meta Graph API.
• To authenticate your Meta account and manage webhook subscriptions.
• To display conversation analytics in your dashboard.
• To send you service-related notifications and support communications.

Our application integrates with the Meta Platform (Facebook / Instagram) and complies with the Meta Platform Terms and Meta Developer Policies.

• We only request permissions necessary to send and receive messages (instagram_manage_messages, pages_messaging).
• We do not sell, transfer, or use Meta user data for advertising or data brokers.
• All messaging is strictly of type RESPONSE — we only reply to messages that users initiate.
• We do not send unsolicited messages, spam, or promotional content without explicit user consent.

We do not sell your personal data. We may share data with:

• Service providers: Cloud hosting providers (e.g., AWS, Supabase) necessary to operate the platform, under strict data processing agreements.
• AI providers: OpenAI or similar providers to process message content and generate replies. Data is transmitted over encrypted connections.
• Legal requirements: If required by law, court order, or to protect the rights and safety of users.

Conversation data is retained for as long as your account is active or as needed to provide the service. You may request deletion of your data at any time by contacting us. Upon account deletion, all associated data is permanently removed within 30 days.

We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest, and HMAC signature verification for all Meta webhook events. Access tokens are stored encrypted and scoped per business account.

Depending on your jurisdiction (including GDPR and KVKK), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Data portability.

To exercise these rights, contact us at afsarsoft1@gmail.com.

We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.

Our service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance.

If you have questions or concerns about this Privacy Policy, please contact us: