Before you connect

Connect your account using the permissions you grant on Instagram. Enter your password only on Instagram.

Information visible to service administrators

Administrators can view your Instagram username and account ID, sign-up date, connection status and expiration date, automation names and status, selected post details and links, configured DM text and conditions, and delivery times, results and error codes. This information is reviewed to investigate misuse. When needed, administrators may pause an automation or block sending for a post and record the reason.

Information processed by the server but not shown in the admin interface

The server processes encrypted account access tokens, incoming comment text, commenter and message sender IDs, message IDs, receipt times and button responses. If follow checking is enabled, it checks the follow relationship after the recipient responds and records the result.

Information we do not receive or store

We do not receive Instagram passwords or two-factor authentication codes. The service database currently does not store ordinary text or attachments from incoming DMs, and the service does not collect your full past DM conversations. Payments are not connected yet.

Access permissions and data exposure risks

Limits in the admin interface are separate from server access permissions. Operators with database or server access can access stored data. With the decryption key, they can also decrypt access tokens. Access tokens are encrypted using AES-GCM; this encryption is not applied to all other stored data. We cannot guarantee that there are no security risks.

Disconnecting and deleting data

Disconnecting removes stored tokens and stops automations. To also remove past records, use account and data deletion. You can revoke app permissions on Instagram as well. This service does not delete DMs that have already been sent.

Comment text and response data for completed events are cleaned up after 7 days, and processing records are generally cleaned up after 90 days. Items still being processed are excluded. See the privacy notice (in Korean) for details about processing purposes, retention and how to contact us.