Pingback

Privacy Policy

Effective 6 August 2026

This Privacy Policy explains how Pingback ("Pingback", "we", "us") collects, uses, and protects information when you use our Instagram DM automation service (the "Service"). By using the Service you agree to this policy.

Information we collect

  • Account information — the email address you sign up with and your plan.
  • Instagram connection — when you connect your Instagram Business/Creator account via Meta's official login, we store an access token (encrypted at rest) and your Instagram account id and username, so we can send replies on your behalf.
  • Automation data — the automation rules you create and a log of events your rules process (incoming comments/messages, which rule matched, whether a reply was sent). This is used to run your automations and show you analytics.
  • Leads — if a person sends an email address or phone number to your connected account, we may store it so you can follow up. You are responsible for handling this data lawfully.
  • Insights — aggregate performance metrics we fetch from Instagram (reach, likes, etc.) to generate your analytics and tips.
  • Payment information — handled by our payment processor; we do not store card numbers.

How we use information

  • To operate your automations (match triggers and send replies).
  • To show you analytics, activity logs, leads, and growth tips.
  • To manage your account, plan limits, and billing.
  • To maintain security and comply with Meta Platform Terms and applicable law.

Third parties we share with

  • Meta (Instagram) — to receive events and send messages via the official API.
  • Payment processor — to process subscriptions.
  • AI provider — if you enable AI intent matching, message text may be sent to our AI provider solely to classify intent.
  • Hosting & database providers — to run the Service.

We do not sell your personal data.

Data retention

We keep your data while your account is active. Event logs may be retained for a limited period for analytics and then removed. You can delete your data at any time (see below).

Security

Instagram access tokens are encrypted at rest. Webhook traffic is signature-verified. Access to systems is restricted. No system is perfectly secure, but we take reasonable measures to protect your data.

Your rights & data deletion

You can disconnect your Instagram account or delete your account at any time from the dashboard. To request deletion of your data, visit our Data Deletion page or email us. Removing our app from your Instagram settings also triggers deletion of the associated connection and token.

Contact

Questions? Email support@dm-app.bmdeshmukh18.in.

This document is a template provided for setup and should be reviewed by a qualified professional before commercial use. It is not legal advice.