Privacy Policy

This Privacy Policy explains how dmrabbit ("dmrabbit", "we", "us") collects, uses, and protects information when you use our Instagram automation service (the "Service"). By using the Service you agree to this policy.

1. Who we are

dmrabbit is a tool that lets you automate replies to comments and direct messages on Instagram professional accounts you own or are authorized to manage. For privacy questions, contact us at [email protected].

2. Information we collect

Account information. When you sign up, we collect your name, email address, and a hashed password.

Instagram data. When you connect an Instagram account, we access — only for the accounts you explicitly authorize, and only via the official Instagram API — the following:

• Profile details: username, name, profile picture, and account type.
• Comments on your posts, reels, and other media.
• Direct messages sent to and from the connected account.
• Media and insights for your content.
• An access token that lets us act on your behalf within the permissions you grant.

We do not collect data from accounts you have not connected, and we never ask for your Instagram password.

3. How we use information

• To run the automations you configure (e.g. auto-replying to comments, sending DMs).
• To display your accounts, comments, messages, and activity in your dashboard.
• To operate, secure, and improve the Service.
• To communicate with you about your account and support requests.

We use Instagram data only to provide the Service to you, in accordance with the Meta Platform Terms and applicable developer policies. We do not sell your data, and we do not use it for advertising.

4. How we share information

We do not sell or rent your personal information. We share it only with service providers that help us run the Service (such as hosting and email delivery), under agreements that require them to protect it, or when required by law.

5. Data retention and deletion

We keep your data for as long as your account is active. You can remove a connected Instagram account at any time from your dashboard — this deletes that account's stored data and automation rules and stops further access.

If you remove dmrabbit from your Instagram settings, Meta notifies us and we delete the associated data. You may also request deletion of all your data by emailing [email protected], or via our data deletion instructions.

6. Data security

Access tokens and passwords are stored securely (passwords are hashed; we never store them in plain text). We use industry-standard measures to protect your information, though no method of transmission or storage is completely secure.

7. Cookies

We use a single, essential session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

8. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

9. Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, notify you through the Service.

10. Contact

Questions about this policy? Email [email protected].