Privacy policy
This policy explains what InstaReacher collects, why, who helps us process it, and how you can see or delete it. InstaReacher is operated by AmplifyX Labs. We never see or store your Instagram password or two-factor codes. About the people you contact, we only use what's on their public profile.
InstaReacher is in early access and paid plans have not launched. Before they do, we'll publish the registered company details for AmplifyX Labs on this page. Send questions about this policy to piyushh@amplifyxlabs.com.
The short version
- You sign in to Instagram on a hosted page run by our sending provider, Unipile. We never see your password or two-factor codes.
- We store what we need to run your campaigns and your inbox: your account details, your audiences, your messages and the replies you get.
- Information about the people you contact is limited to what they show publicly on Instagram.
- We don't sell personal data.
- You can ask us to delete your data at any time.
What we collect about you
When you use InstaReacher, we collect the details you give us and the data the service needs to work: your name and email, the Instagram accounts you connect, the campaigns and messages you write, and basic records of how you use the app.
- Account details: your name, email address and workspace settings.
- Connected Instagram accounts: the username, the login city you pick, and the connection status our sending provider reports back. You sign in on Unipile's hosted page, so your password and two-factor codes go to Unipile and then to Instagram. They never reach us. Unipile then holds a session for that account until you disconnect it.
- Your content: audiences, message templates, campaigns, notes and the conversations in your inbox.
- Usage and technical data: log records such as when you signed in, errors, and your browser and device type. We use these to keep the service running and secure.
- Billing details: once paid plans launch, payments will go through a payment processor. We won't store full card numbers.
What we collect about the people you contact
Only public information. For the people in your audiences, we process their public Instagram username, name, bio, follower and following counts, recent public posts, and a public email or phone number if their profile shows one. We don't infer gender, age, race or appearance from photos or from anything else.
We use this to build your audiences, write a first line about the person's own posts, avoid contacting the same person twice from your workspace, and show you their profile next to their reply. Anyone you contacted can email us to have their data removed. We'll delete it from our systems and stop it being used in any workspace.
How we use data
To run the service you signed up for, keep it safe, and tell you about your account. We don't sell personal data, and we don't use your conversations to advertise to you or anyone else.
Specifically, we use data to:
- send message requests and follow-ups from your connected account, at the pace you set within our limits;
- show replies in your inbox and keep each lead's status up to date;
- write the first line of each message from the person's public bio and recent post;
- pause an account and alert you when Instagram asks for a login check;
- answer your support requests and send you account and service emails;
- find and fix problems, and prevent abuse.
Who processes data for us
We use a small number of service providers to run InstaReacher, and each one gets only the data it needs for its part of the job. Where we've chosen a provider, we name it. We'll list the others here once they're chosen.
- Unipile (sending provider): handles the hosted Instagram sign-in, holds the session for each connected account, and sends and receives messages for those accounts.
- Anthropic (AI provider): when the AI feature is on, writes the first line of a message from a person's public bio and recent post, and powers our AI tools. For the first line we send it only that public text, not your inbox. For the free AI tools, it receives the text you type into them.
- Lead data provider: supplies public profile information for your audiences. Not chosen yet.
- Vercel (hosting): runs the website and app. We'll name the production database provider here once it's chosen.
- Meta's official API: for comment-to-DM, when you connect it.
- Payment processor: for billing, once paid plans launch.
How long we keep it
We keep your account data while your account is open. When you close your account or ask us to delete your data, we delete it within 30 days, unless we need to keep a record for legal or billing reasons. Message requests nobody answered expire in the app after 14 days.
Backups may hold deleted data for a short time until they are overwritten.
Your choices and rights
You can see, correct, export or delete your data. You can disconnect an Instagram account at any time, and all sending from it stops. Depending on where you live, laws such as the GDPR or the California Consumer Privacy Act may give you further rights, and we'll honour them.
To make a request, email piyushh@amplifyxlabs.com from the address on your account. We'll reply within 30 days.
Security
We encrypt data in transit, limit who on our side can access it, and require a secret for the machine-to-machine endpoints the service uses. No system is perfectly secure, so we can't promise your data will never be exposed. If a breach affects your data, we'll tell you promptly.
Cookies
We use the cookies needed to keep you signed in and to run the site. If we add analytics, we'll list the tools here and use them only to understand how people use the site, not to advertise to you.
Children
InstaReacher is for businesses and isn't meant for anyone under 18. We don't knowingly collect data from children.
Changes to this policy
When we change this policy, we'll update the date at the top. For significant changes, we'll also email account holders before the change takes effect.
Contact
AmplifyX Labs · piyushh@amplifyxlabs.com. We'll add the registered entity name and address here before paid plans launch.