Privacy Policy

Last updated: September 3, 2026

fastttDM ("we", "us", or "our") provides Instagram direct message and comment automation for businesses and creators. This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Information we collect

Account information

Email address and password (via Supabase Auth)
Profile metadata (account creation date)

Instagram data (via Meta APIs)

When you connect your Instagram Business or Creator account, we receive and store:

Instagram user ID and username
OAuth access tokens (encrypted at rest when configured)
Inbound and outbound message content processed by your rules
Comment text on your posts and Reels
Instagram-scoped user IDs of people who message or comment
Follower relationship status (when required by your rules)

Payment information

Paid subscriptions are processed by Razorpay. We do not store full card numbers. We receive subscription status, payment event metadata, and Razorpay customer/subscription identifiers.

Usage and analytics

Automation rule configurations you create
Message and comment event logs
Monthly auto-reply usage counters
Standard server logs (IP address, user agent, timestamps)

2. How we use your information

We use collected data to:

Provide Instagram DM and comment automation you configure
Authenticate your account and maintain sessions
Process subscriptions and enforce plan limits
Display analytics and inbox history in your dashboard
Improve reliability, security, and customer support
Comply with legal obligations

We do not sell your personal data. We do not use Instagram message content for advertising or unrelated machine learning.

3. Legal basis (GDPR)

Contract: processing needed to deliver the service you signed up for
Legitimate interest: fraud prevention, security, and product improvement
Consent: where required for optional features or marketing communications

4. Data sharing

We share data only with service providers necessary to operate fastttDM:

Meta / Instagram — to send and receive messages and comments on your behalf
Supabase — authentication and database hosting
Razorpay — payment processing for paid plans
Hosting provider — application deployment (e.g. Vercel)

We may disclose information if required by law or to protect our rights and users.

5. Data retention

Account data is retained while your account is active
Message and comment logs are retained for analytics unless you request deletion
Instagram access tokens are deleted when you disconnect your account or delete your fastttDM account
Payment records are retained as required for tax and accounting purposes

6. Security

We use HTTPS everywhere, Row Level Security on database tables, optional AES-256-GCM encryption for Instagram tokens, and HMAC verification for webhooks. No system is 100% secure; please use a strong, unique password.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, or export your data, and to object to certain processing. To exercise these rights, email privacy@fastttdm.com or follow our Data Deletion Instructions.

8. Children

fastttDM is not intended for users under 18. We do not knowingly collect data from children.

9. International transfers

Your data may be processed in countries where our providers operate. We rely on appropriate safeguards where required by law.

10. Changes

We may update this policy. Material changes will be posted on this page with an updated date.

11. Contact

fastttDM
Email: privacy@fastttdm.com
Website: https://www.fastttdm.com