Privacy Policy

We collect account information such as your name and email address when you create an Inflow account.

We collect Instagram account data needed to power automations, including usernames and access tokens, and those sensitive tokens are encrypted.

We collect usage data such as DM counts sent through the product, but not the content of those messages.

We collect bio page data such as links, views, and click activity so you can manage performance.

We use your information to provide DM automation, bio pages, analytics, and related product functionality.

We use your information to send transactional emails and account notices.

We use aggregated product data to improve reliability, performance, and product decisions.

We never sell your data.

Your data is hosted on Supabase using Postgres with encryption at rest.

Instagram access tokens are encrypted with AES-256 before storage.

All data is transmitted over HTTPS.

We only request the permissions necessary to provide the Inflow service.

We never store DM content, only metadata required for delivery, automation, and analytics.

You can disconnect your Instagram account at any time from your settings.

When an automation is triggered by a comment, we process the commenter's Instagram-scoped user ID and username to deliver the automated DM. Comment text is used only for keyword matching and is not stored.

Commenter data (username, Instagram ID) is retained in your DM logs for as long as your account is active, and deleted when you delete your account or request data removal.

You can access your data at any time from your account settings.

You can request deletion of your account and associated data.

For privacy requests, contact us at privacy@inflow.in.

privacy@inflow.in