Data Policy

1. What Data We Store

ChirplyMint stores the minimum data necessary to provide our Instagram DM automation services:

• Account Data: Your name, email address, and authentication tokens (encrypted)
• Instagram Account Data: Instagram Business/Creator account ID, username, profile picture URL, and page access token (encrypted)
• Automation Rules: Keywords, message templates, comment reply templates, button configurations, postback flow definitions, and AI persona settings
• DM Logs: Records of automated DMs sent (recipient IG user ID, timestamp, message type, status) for analytics and debugging
• Lead Data: Instagram user IDs and usernames of users who interacted with your automated content, along with any assigned tags
• Activity Logs: Internal records of account actions (automation created, settings changed, etc.) for audit purposes

2. How We Use Your Data

• To send automated DMs and comment replies on your behalf
• To process postback button interactions and execute multi-step flows
• To verify follower status when follow-check is enabled
• To generate AI-powered message content using your custom persona settings
• To display analytics, lead tracking, and performance metrics in your dashboard
• To detect and prevent abuse of our platform
• To communicate important service updates and security notifications

3. Data Retention

We retain data for as long as your account is active:

4. Data Security

We take data security seriously and employ multiple layers of protection:

• All data is stored in Supabase (PostgreSQL) with Row-Level Security (RLS) policies — you can only access your own data
• Instagram access tokens and Meta API secrets are encrypted at rest
• All connections use TLS/HTTPS — data in transit is always encrypted
• Webhook signatures are verified using your Meta App Secret before processing any incoming events
• We never store Instagram DM content (message bodies) — only metadata (status, timestamp, type) is logged

5. Third-Party Data Sharing

We share data only with the following third-party services required to operate ChirplyMint:

• Meta (Instagram API): To send DMs, read comments, and verify followers on your behalf
• Supabase (Database & Auth): To store your account data and handle authentication
• NVIDIA NIM (AI): Your custom persona instructions and message context are sent for AI generation — no personal data is shared
• Vercel (Hosting): Serves the application — minimal access logs are retained

We do not sell, rent, or trade your data to any third party for marketing or advertising purposes.

6. Your Data Rights

You have the following rights regarding your data:

• Access: View all data associated with your account via the dashboard
• Portability: Request an export of your data in machine-readable format
• Correction: Update your account information at any time through Settings
• Deletion: Request complete deletion of all your data (see Section 7)
• Revocation: Disconnect your Instagram account at any time — we immediately stop all automation and revoke API access

7. Data Deletion Process

You can request data deletion through any of these methods:

• From Instagram: Remove ChirplyMint from your Instagram settings → we receive a callback and automatically delete all associated data
• From ChirplyMint: Navigate to Settings → Delete Account → all data is permanently removed
• Via Email: Send a deletion request to privacy@novamintnetworks.in with your registered email address

8. Meta Platform Compliance

ChirplyMint complies with Meta's Platform Terms, including their Data Policy requirements. We implement mandatory callback endpoints for app deauthorization and data deletion requests. When Meta notifies us that a user has removed ChirplyMint from their Instagram settings, we automatically process the deauthorization and data cleanup within 24 hours.

9. Cookie Policy

ChirplyMint uses essential cookies for authentication and session management. We also use optional analytics cookies (only with your consent). You can manage your cookie preferences at any time via the "Manage Preferences" link in our website footer. For more details, see our Privacy Policy.

10. Contact

For questions about this Data Policy or to exercise your data rights: