Privacy Policy

1. Information We Collect

When you use ChirplyMint, we collect information you provide directly, including your name, email address, and Instagram account details when you connect your account.

• Account information (name, email)
• Instagram business account data (via official Meta API)
• Automation rules and message templates you create
• Usage analytics (page views, feature usage) — consent-based only

2. How We Use Your Information

We use your information to:

• Provide and improve ChirplyMint services
• Process and deliver automated DMs on your behalf
• Send you service updates, weekly reports, and billing notifications
• Analyze usage patterns to improve our product (with consent)

3. Cookies & Tracking

We use the following types of cookies:

• Essential cookies — for authentication, session management, and security. These cannot be disabled.
• Analytics cookies — we use PostHog for anonymized usage analytics. These are only activated after you give explicit consent via our cookie banner.

You can update your cookie preferences at any time by clicking "Manage Preferences" in the site footer, or by clearing your browser cookies.

4. Instagram Data

We access your Instagram data exclusively through the official Meta Graph API. We only access data necessary for automation features: comments on your posts, and the ability to send DMs on your behalf. We do not store the content of conversations beyond what's needed for analytics.

5. Google Account Data (Sign in with Google)

ChirplyMint offers "Sign in with Google." If you use it, we request only two Google scopes:

• .../auth/userinfo.email — your primary Google Account email address
• .../auth/userinfo.profile — your public profile information (name, profile picture)

This data is used solely to create and authenticate your ChirplyMint account and display your name/avatar in the dashboard. It is stored in our Supabase database, is never sold or shared with any third party beyond the providers listed in section 7, and is never used for advertising. You can delete it at any time by deleting your account (section 10), which removes all Google-sourced data within 30 days. You can also revoke ChirplyMint's access at any time in your Google Account permissions.

6. Third-Party Services

• Meta/Instagram — DM automation via official APIs
• Supabase — database and authentication
• Groq & NVIDIA (AI providers) — generate AI replies; your persona settings and message context are sent for generation, never for training, with automatic failover between providers
• Cashfree — payment processing (INR)
• Resend — transactional emails
• PostHog — analytics (consent-based only)

7. Data Security

We use industry-standard security measures including encryption in transit (TLS) and at rest, row-level security on all database tables, and secure OAuth flows. Your Instagram access tokens are encrypted and stored securely. We never store your Instagram password.

8. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers who help us operate (hosting, analytics, payments)
• Legal authorities when required by law

9. Your Rights

You can:

• Access your data at any time via your dashboard
• Delete your account and all associated data from Settings
• Disconnect your Instagram account
• Withdraw consent for analytics cookies at any time
• Opt out of marketing emails

10. Data Retention & Deletion

Your data is retained for as long as your ChirplyMint account is active, because it is required to operate the service you signed up for (automations, leads, and analytics are functional data). If your account is inactive for 24 continuous months, we may delete the account and its data, with notice sent to your email address beforehand.

When you delete your account, all your data — including automations, leads, message history, and Google-sourced profile information — is permanently removed within 30 days. You can also disconnect Instagram or revoke Google access at any time without deleting your account.

Children's Privacy

ChirplyMint is a business tool and is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it promptly.

11. Contact

For privacy-related questions, contact us at ChirplyMint@gmail.com