Reply-doBack to Home

Privacy Policy

Last updated: July 20, 2026

1. Introduction

This Privacy Policy describes how Reply-do ("we," "our," or "us"), operated by Natanyx, explains how we collect, use, store, and share your personal information when you visit replydo.natanyx.dev(the "Website") or use our Instagram automation services (the "Service").

By accessing or using our Service, you agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: When you create an account via Clerk (our authentication provider), we collect your name, email address, and profile information.
  • Payment Information: When you subscribe to a paid plan, payment is processed through Razorpay. We store your subscription plan, status, and transaction identifiers. We do not store your full credit/debit card number or CVV.
  • Instagram Account Data: When you connect your Instagram Business or Creator account, we receive an access token, your Instagram user ID, and public profile information (username, profile picture) via the official Instagram Graph API.
  • Automation Configuration: Keywords, reply templates, DM message templates, and any attachments you upload for your automations.
  • Support Requests: Any information you voluntarily provide when contacting us for help.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, automation performance metrics (comments processed, DMs sent), timestamps, and interaction patterns.
  • Device & Browser Information: IP address, browser type and version, device type, operating system, and screen resolution.
  • Cookies & Local Storage: We use essential cookies for authentication (via Clerk) and session management. We do not use third-party advertising or tracking cookies.

2.3 Information from Third-Party Services

  • Instagram / Meta: Public profile information, comments on your Reels and posts, and messaging permissions — all accessed through officially sanctioned Instagram Graph APIs.
  • Clerk: Authentication tokens and user identity data.
  • Razorpay: Payment confirmation and subscription lifecycle events.

3. How We Use Your Information

We use the collected information for the following purposes:

  • To create and manage your Reply-do account.
  • To authenticate you and maintain session security.
  • To execute your configured automations — including replying to Instagram comments and sending DMs on your behalf.
  • To process payments and manage your subscription.
  • To monitor and improve Service performance, reliability, and uptime.
  • To communicate with you regarding account activity, security alerts, product updates, and support requests.
  • To detect, prevent, and address fraud, abuse, and violations of our Terms of Service.
  • To comply with applicable legal obligations.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share information only in the following circumstances:

  • Service Providers: We share data with trusted third-party vendors who help us operate the Service — specifically Clerk (authentication), Razorpay (payments), and Prisma/database hosting (data storage). These providers are contractually bound to use your data only as necessary to perform services on our behalf.
  • Instagram / Meta: Your connected Instagram account data is used via official APIs to perform automations you have configured. We do not share your data with Meta beyond what is required for API functionality.
  • Legal Requirements: We may disclose your information if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. We will notify you via email or prominent notice on our Website of any such change.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you the Service. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing our agreements).

Automation logs (comments replied to, DMs sent) are retained for up to 90 days after generation, after which they are automatically purged.

6. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption of data in transit (TLS/HTTPS) and at rest.
  • Secure authentication via Clerk with support for multi-factor authentication.
  • Role-based access controls limiting internal data access to authorised personnel only.
  • Regular security audits and dependency vulnerability monitoring.

No method of electronic storage or transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data (subject to legal retention requirements).
  • Data Portability: Request a machine-readable copy of your data.
  • Withdraw Consent: Where processing is based on consent, withdraw that consent at any time.
  • Objection: Object to data processing in certain circumstances.

To exercise any of these rights, please contact us at naman@natanyx.dev.

8. Instagram Data Deletion

In compliance with Meta Platform requirements, we provide a data deletion callback endpoint. When a user requests data deletion through Instagram, we process the request and remove all associated Instagram data from our systems.

Data deletion callback URL: https://replydo.natanyx.dev/api/auth/data-deletion

You may also request manual deletion by emailing naman@natanyx.dev with your account email address.

9. Cookies

We use only essential cookies required for authentication and session management. These cookies are strictly necessary for the Website to function and cannot be switched off. We do not use any marketing, analytics, or advertising cookies.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete that information promptly.

11. International Data Transfers

Your data may be transferred to and stored on servers located outside your country of residence, including India. By using our Service, you consent to such transfers. We ensure appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or a prominent notice on our Website. We encourage you to review this page periodically.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: