Privacy policy
Last updated 1 March 2026
1. Who we are
RelayDM provides comment-to-DM automation for Instagram Business and Creator accounts. We act as the data controller for account and billing data, and as a processor for the audience data you collect through your own Instagram account.
2. Data we collect
Account data (name, email, hashed credentials handled by our auth provider), workspace configuration, Instagram account metadata returned by Meta (username, follower count, media), automation content you write, delivery records, and click events for tracked links. We do not collect Instagram passwords.
3. Instagram and Meta data
When you connect an account we store a revocable OAuth access token issued by Meta and the minimum profile and media fields required to run automations. Comment and commenter data is received through Meta webhooks and stored only to deliver messages, deduplicate retries and produce your analytics.
4. Click tracking
Tracked links record a timestamp, referrer, the automation and slot that produced the click, and a salted hash of user agent plus IP used solely for unique-visitor counting. We do not store raw IP addresses and we do not sell click data.
5. How we use data
To operate the service, deliver messages you configure, produce analytics, prevent abuse, provide support and meet legal obligations. We do not use your audience data to train models or to market to your followers.
6. Sharing
We share data with infrastructure sub-processors (hosting, database, email delivery, payment processing) and with Meta when delivering messages you configure. Each sub-processor is bound by a data processing agreement.
7. Retention
Delivery and click records are retained for 24 months, after which they are aggregated and the row-level records deleted. Deleting your workspace removes automations, links, contacts and delivery history within 30 days.
8. Your rights
You can access, correct, export or delete your data from the dashboard, or by contacting us. Where GDPR or UK GDPR applies you also have the right to object, restrict processing and lodge a complaint with your supervisory authority.
9. Disconnecting Instagram
Revoking access from the Integrations page invalidates the stored token immediately and stops all delivery. You can also revoke access from Instagram's own app settings.
10. Contact
Questions or requests: hello@relaydm.app. We respond to rights requests within 30 days.