Privacy Policy

Last updated: November 11, 2026

This policy explains what personal data SentYou collects when you use SentYou, why, and the choices you have.

1. Data we collect

• Account data: your name, email address, business name and a securely hashed password.
• Instagram data, after you connect an account through Meta's login: the account's ID, username, name and profile picture, a list of your posts (to choose which ones to automate), and an access token from Meta. The token is stored encrypted and never shown in your browser.
• Comment and message data: for comments on your posts that match your keywords, we store the commenter's Instagram ID and username, the comment text, and whether the reply and messages were delivered. When someone taps a button in a message we sent, we record that tap to continue the conversation. We don't read other messages or comments.
• Billing data: your plan, payment status and the references Geidea gives us. Card details are entered on Geidea's secure page and are never sent to or stored by us.
• Technical data: a login cookie (needed to keep you signed in), your IP address and browser type for security, and server logs.

2. How we use it

• To run the automations you set up: reply to matching comments and send the messages you wrote.
• To show you your history, usage and plan.
• To bill paid plans and prevent fraud.
• To send account emails such as password resets.
• To keep the Service secure and fix problems.

We don't sell personal data and we don't use it for advertising.

3. Who we share it with

• Meta Platforms, to send replies and messages through the Instagram API.
• Geidea, to process payments.
• Brevo, to send account emails.
• Railway, which hosts the Service and its database.
• Authorities, if the law requires it.

4. How long we keep it

We keep your data while your account is open. Comment history is shown in your dashboard and is deleted with your account. When you disconnect an Instagram account we delete its access token right away. When you delete your account, we delete your workspace, automations, history and Instagram connections.

5. Your choices and rights

• Disconnect an Instagram account any time from the Instagram page of your dashboard, or remove the app in your Instagram or Meta settings.
• Edit your profile or delete your account any time from Account settings.
• Ask us for a copy of your data, or to correct or delete it, by contacting us.

6. Instagram data deletion

If you remove SentYou in your Meta settings, Meta tells us and we delete the access token and data we obtained from Instagram for that account. Meta's data deletion callback for this app is https://sentyou.ramramez.com/meta/instagram/data-deletion. You'll receive a confirmation code you can use to check the deletion status. You can also email us to request deletion.

7. People who comment on our customers' posts

If you commented on a business's Instagram post and received an automatic message, that business decided to use SentYou. We process your username, comment and button taps on their behalf only to deliver their reply. To have this data deleted, contact the business or contact us.

8. Security

Passwords are hashed, Instagram tokens are encrypted, connections use HTTPS, and each customer's data is kept separate from every other customer's.

9. Changes

We'll post updates here and tell you about significant changes by email or in the dashboard.

10. Contact

Privacy questions: contact us at hello@ramramez.com.