Privacy Policy

IMFLUENCOR (“IMFLUENCOR”, “we”, “us”) operates a creator economy marketplace connecting brands, agencies, and content creators, and a separate mobile automation product, Instant DM, that helps creators automate Instagram comment and direct message replies. This policy covers imfluencor.com and its subdomains, the IMFLUENCOR portal and dashboard, and the Instant DM Android app.

For personal data collected through your IMFLUENCOR account and your use of our services, IMFLUENCOR acts as the Data Fiduciary — we determine the purpose and means of processing that data. Where you connect an Instagram account, Meta Platforms, Inc. is separately a data fiduciary for its own platform; IMFLUENCOR processes the Instagram data you authorize us to access strictly to provide the automation and analytics features you set up.

We only describe data categories that our systems actually collect and store today.

Account data

• Name, email address, and phone number (where provided)
• Authentication identifiers (password hash, or Google/Firebase sign-in identifier)
• Profile details you add: bio, avatar, website, public handle
• Creator/agency performance metadata generated by using the platform (ratings, order history, referral activity)
• For creators who withdraw earnings: the payout bank account details you provide

Instagram data (only if you connect an account)

• Instagram user ID, username, display name, profile picture, and biography
• Follower, following, and media counts
• IDs of posts you choose to monitor for comment automation, and the status of comments processed under a workflow
• We do not store the text of your Instagram comments or direct messages — they are read from Meta's API at the moment a workflow runs and are not saved to our database

Automation data

• Workflow definitions you create: triggers, conditions, and the reply templates you write
• Execution history: when a workflow ran, its status, and provider responses (e.g. a delivered message's ID) — not the incoming comment/message text itself

Payment data

• Payments are processed by Razorpay. IMFLUENCOR does not store your card, UPI, or bank login details — we store only an order/payment reference returned by Razorpay

Technical data

• Standard access logs (request path, status code, timestamp) for security and debugging
• Session/authentication tokens, stored securely and never logged in full

Directly from you, when you register, complete your profile, or configure automations; from Instagram/Meta, via the OAuth connection you explicitly authorize; and automatically, from your own use of the platform (e.g. workflow execution records).

• Email and phone: account authentication, login, and service communication
• Instagram username and profile data: identify your connected account and display it in your dashboard
• Instagram comments/messages (read at execution time, not stored): trigger and run the DM/comment automations you configure
• Follower/media counts: power the Growth analytics tab
• Workflow and execution data: run your automations and show you their history
• Payment reference: confirm subscription/order status
• Payout bank details: send creator earnings

Creating an account and connecting an Instagram account are both actions you take deliberately; Instagram's own OAuth consent screen shows you exactly which permissions you're granting before you approve them. We are building a structured consent record (what was consented to, when, and under which policy version) as part of our ongoing DPDP-readiness work — today, consent is evidenced by your account creation and by Instagram's own OAuth grant.

Connecting Instagram uses Instagram API with Instagram Login. We request only the permissions needed for the features you use: reading your basic profile, and managing comments/messages for workflows you configure. Your Instagram access token is encrypted at rest (AES-256-GCM) and is never included in any data export. You can disconnect at any time from the app; Meta may also notify us if you revoke access directly from Instagram's own settings, in which case we stop using the token immediately.

Instant DM lets you configure triggers (e.g. a keyword in a comment), conditions, and actions (e.g. send a templated reply or DM). When a trigger fires, we call the Instagram Graph API on your behalf using your connected account's token, and log the outcome (success/failure, timestamps, provider response) so you can review your automation's history.

The Growth tab shows follower, following, and post counts and your top-performing posts, sourced directly from Instagram's API when you view it — we do not currently retain a historical time series of these metrics.

We use strictly necessary cookies/local storage for authentication sessions. If analytics cookies are active on this site, they are used only in aggregate to understand site usage, not to build individual advertising profiles.

We do not sell your personal data. We share the minimum data necessary with the service providers below to operate IMFLUENCOR, and with Meta as required by your own use of Instagram features.

• Meta / Instagram — Instagram account connection and automation actions you configure
• Razorpay — payment processing for subscriptions and orders
• Resend — transactional email delivery
• Twilio — SMS delivery for phone verification (OTP)
• Firebase (Google) — Google sign-in authentication

Each processor receives only the data necessary to perform its specific function for you.

Our core application and database run on infrastructure we operate directly; some of our service providers above (Meta, Razorpay, Resend, Twilio, Firebase) may process data on servers located outside India as part of their own global infrastructure. We do not currently make a blanket claim that all data is stored exclusively within India. Our architecture is designed to accommodate future government restrictions on cross-border transfer of personal data as they come into force.

Instagram access tokens are encrypted at rest (AES-256-GCM). All traffic to our services uses HTTPS. Access to production systems is restricted, and authentication endpoints are rate-limited. We continue to invest in the reasonable security safeguards contemplated by the DPDP Rules.

We retain account and automation data for as long as your account is active. Instagram data is retained only while an Instagram account remains connected, or until you request deletion — see Data Deletion. We are formalizing category-by-category retention schedules as part of our ongoing DPDP-readiness work; some operational data (e.g. workflow execution logs) does not yet have an automated expiry.

You can request access to, correction of, or erasure of your personal data, subject to information we are legally required to retain. Today, you can correct your account profile directly in the app, and delete your account and associated data from your account settings or by contacting us. A self-serve rights request center is planned as part of our ongoing DPDP-readiness work.

You can disconnect your Instagram account at any time from within the app, which stops all Instagram-dependent processing immediately. Withdrawing consent for Instagram access is separate from deleting your IMFLUENCOR account — see the next section.

You can request deletion of your IMFLUENCOR account from within the app. This removes your account and directly associated records from our systems, other than data we are required to retain for legal, tax, or dispute-resolution purposes.

Deleting your Instagram connection, or requesting deletion directly through Instagram's own settings, removes your connected Instagram account, monitored posts, and comment-processing records, along with the automation workflows tied to that connection. Full details: imfluencor.com/data-deletion.

If you have a concern about how your personal data is handled, contact us at sagar@techtray.in. We aim to acknowledge grievances promptly and resolve them within a reasonable period, in line with the grievance-redressal timelines contemplated by the DPDP Rules. A dedicated grievance submission flow is planned as part of our ongoing DPDP-readiness work.

For questions about how IMFLUENCOR processes personal data, contact: sagar@techtray.in. This is our designated privacy contact; IMFLUENCOR has not represented itself as a Significant Data Fiduciary requiring a statutory Data Protection Officer.

IMFLUENCOR is intended for users aged 18 and over — creating an account, connecting Instagram, and transacting on the platform all require you to be an adult. We do not knowingly design our services to process children's personal data. We do not currently operate a dedicated technical age-verification check beyond this stated requirement; if we become aware that an account belongs to someone under 18, we will take steps to close it.

We may update this policy as our product or legal obligations change. Material changes will be reflected by updating the “Last updated” date above; where required, we will seek renewed consent for any materially new processing purpose.

IMFLUENCOR Pvt. Ltd.
Email: sagar@techtray.in