Last Updated: January 3, 2026
Direct Reply ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Instagram auto-reply service. By using our service, you agree to the collection and use of information in accordance with this policy.
Direct Reply is operated by Farshad Hassanzadeh Naderi as a sole proprietorship registered under the Business Names Act in the Province of Ontario, Canada (Business Identification Number: 1001460453, Effective Date: January 04, 2026).
When you register for Direct Reply, we collect your email address or mobile number (depending on your chosen authentication method). This information is necessary to create and manage your account.
When you connect your Instagram Business or Creator account, we access and store: Instagram account username and ID, access tokens for API communication, messages and comments received on your Instagram account (to enable auto-reply functionality), and media information (posts, stories) that you configure for auto-replies.
We automatically collect certain information about your device and how you interact with our service, including IP address, browser type, device information, pages visited, and features used.
Our service integrates with Instagram's Graph API. When you connect your Instagram Business or Creator account, you authorize us to access your Instagram data through Meta's official API. We only request the minimum permissions necessary to provide our auto-reply service.
The permissions we request include: instagram_basic for basic profile information, instagram_manage_messages for reading and sending direct messages, instagram_manage_comments for reading and responding to comments, and pages_read_engagement for accessing page insights.
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Your data is stored on secure servers with encryption. Instagram access tokens are securely stored and automatically refreshed. User passwords are encrypted using industry-standard hashing algorithms. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
We do not sell, trade, or rent your personal information to third parties. We only share your information in the following limited circumstances: with service providers who assist us in operating our platform (such as hosting providers), when required by law or to respond to legal process, to protect our rights, property, or safety, or that of our users or the public. Instagram data is processed solely for providing our auto-reply service and is never shared with third parties for marketing purposes.
We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze how our service is used. You can control cookie preferences through your browser settings, but disabling cookies may affect the functionality of our service.
Our service integrates with the following third-party services:
Our service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.
This Privacy Policy and your use of the Direct Reply service are governed by the laws of the Province of Ontario, Canada, without regard to its conflict of law provisions.
If you have any questions about this Privacy Policy or our data practices, please contact us via Instagram direct message or through the contact form on our website.