Last updated August 18, 2026

Privacy Policy

OpenReply helps businesses send Meta-compliant private replies when people comment on connected Instagram posts or reels.

Data We Collect

We collect account email addresses for authentication, workspace metadata, connected Instagram account identifiers, encrypted Instagram access tokens, campaign settings, webhook payloads, and delivery logs.

How We Use Data

We use this data strictly to authenticate users, connect Instagram integrations, match comment keywords, send private replies through the official Meta Graph APIs, prevent duplicate sends, and protect the service.

Instagram & Meta Data Security

OpenReply does not ask for Instagram passwords, scrape Instagram, or use browser automation. Instagram access tokens are encrypted at rest with AES-256-GCM.

Data Retention & Deletion

Users can disconnect Instagram at any time. For full account deletion requests, email luxundone@duck.com.

Contact & Privacy Officer

For questions regarding data protection and GDPR compliance, contact: luxundone@duck.com.