Privacy Policy

DynamicDM (“we”, “us”) provides software at dynamicdm.in that lets Instagram professional accounts automate replies to comments and direct messages. This policy explains what data we handle and why.

Who is who

The business or creator who connects an Instagram account (“Customer”) decides what their automations say and why. For the messages and contact details their automations process, the Customer is the controller and DynamicDM acts as a processor on their behalf. For account and billing details of Customers themselves, DynamicDM is the controller.

Data we collect

• Customer account data: name, email address and a password hash (we never store your password in readable form).
• Instagram connection data: your Instagram account ID, username, and an access token granted through Instagram Login. The token is encrypted at rest. We never ask for or see your Instagram password.
• Messages and comments: comments on your posts and direct messages sent to your account, plus the replies your automations send, with delivery status.
• Contact data: for people who comment or message your account — their Instagram-scoped ID, username and (where Instagram provides it) name. If your automation asks a question (for example an email address or phone number), the answer the person gives is stored on their contact record.
• Usage and technical data: actions taken in the dashboard (audit log), IP address and basic logs used for security and reliability.

How we use it

• To run the automations you configure: matching keywords, sending replies and DMs, collecting the answers you ask for.
• To show you message history, inbox and analytics.
• To keep the service secure, prevent abuse, and comply with Instagram’s platform rules (for example messaging windows and opt-outs).
• We do not sell personal data, and we do not use message content to train AI models.

Opt-out

If a person replies “STOP” (or “unsubscribe”) to an automated message, we stop sending them automated messages from that account.

Sharing

We share data only with: Meta Platforms (to receive webhooks and send messages through the Instagram API, as you direct); infrastructure providers that host our servers and database; and authorities where legally required. Customers can also forward data they collect to their own tools if they enable that feature.

Retention

We keep data while your account is active. When you disconnect an Instagram account, we stop processing it and revoke the stored token. You can ask us to delete your data at any time (see Data Deletion), and we delete it within 30 days unless the law requires us to keep it.

Security

Access tokens are encrypted, connections use HTTPS, each workspace’s data is separated from others, and access is role-based. No system is perfectly secure; we will notify affected customers of a breach as required by law.

Your rights

Depending on where you live (including under India’s Digital Personal Data Protection Act, 2023, and GDPR where applicable) you may have the right to access, correct, delete or export your data, and to withdraw consent. People who interacted with a Customer’s Instagram account should contact that Customer first, or contact us and we will route or action the request.

Children

The service is for businesses and creators and is not directed at children under 18.

Changes and contact

We will post updates on this page and change the date above. Questions or requests: support@dynamicdm.in.