Privacy Policy

Loop ("Loop", "we", "us") operates the website and web application that provide comment-to-DM automation for Instagram professional accounts. For any privacy matter, contact us at harshilshukla0502@gmail.com.

When you connect your Instagram account and use Loop, we keep:

• Your account name — your Instagram username and account ID, so we know which account is yours.
• A secure access key — Instagram gives us a key to act on your behalf. We store it encrypted. We never see or store your password.
• Your automations — the keywords, reply messages, and links you set up, and the ID of the post each one is attached to.
• A record of each reply — when a comment triggers your automation, we note which comment it was and who commented, so the same person is never messaged twice for the same comment. We also keep the DM we sent and whether it was delivered, so you can see it worked.
• The basics every service keeps — billing records (your card or UPI details stay with our payment provider, not us) and short-lived technical logs that help us keep Loop secure.

• Your password — you log in on Instagram itself, never on Loop.
• Your posts and photos — when you pick a post for an automation, your post list is shown live from Instagram. We don't keep a copy of any caption, image, or video.
• What people write in comments — we check each comment for your keyword and then let it go. The words themselves are never saved.
• Anyone's private messages — Loop only sends the reply you wrote. We cannot read your inbox or anyone else's messages.

And we never sell your data. To anyone. Ever.

When you connect, Instagram shows you a consent screen asking you to approve three things. Here is what each one means in plain words:

• See your basic account info and post list — so we can show which account is connected and let you pick a post. (instagram_business_basic)
• Read comments on your posts — so we can spot your keyword the moment someone comments it. (instagram_business_manage_comments)
• Send DMs on your behalf — so your reply reaches the person who commented. (instagram_business_manage_messages)

That's the whole list. We can't post for you, change your profile, follow anyone, or read your messages.

We use this data for exactly one purpose: to run the automations you configure — watching comments on your posts for your keywords and sending the DM you wrote to the person who commented. We also use account data to show you your own dashboard and activity, and logs to keep the service secure and reliable.

We do not sell or license your data to anyone, use it for advertising, build profiles of commenters, or use it for any purpose not described here. We process Instagram data strictly in accordance with the Meta Platform Terms.

• Meta Platforms — we exchange data with Instagram's API to operate the service (that is how the product works).
• Service providers — our hosting and infrastructure providers store data on our behalf under contractual confidentiality.
• Payment processor — to handle your subscription.
• Legal requirements — if a law or valid legal process requires it.

No one else. We never sell data.

Only as long as you use Loop. Your reply history — which comments we answered and the DMs we sent — stays so you can see what Loop did for you. If you disconnect your Instagram account or delete your Loop account, all of it is deleted promptly: the access key, your automations, and your reply history. We may keep minimal billing records where tax law requires it.

You can have everything Loop stores about you deleted at any time, in any of these ways:

• From your dashboard (instant) — open your Loop dashboard and choose "Delete account & data". This disconnects your Instagram account and erases your account details, automations, and reply history right away.
• Email us — send a request to harshilshukla0502@gmail.com with your Instagram username, and we'll delete everything and confirm within 30 days.
• From Instagram — go to Instagram's Settings → Apps and websites, find Loop and remove it. That instantly revokes our access; then use either option above to erase what we've stored.

You can also email us to access or correct any data we hold about you. Whichever way you choose, the result is the same: your account, automations, and reply history are removed from our systems (we keep nothing else — see "What we never store" above).

All traffic is encrypted in transit (HTTPS). Access tokens are stored encrypted, access to production systems is restricted, and webhook payloads are verified against Meta's signatures before we process them.

Depending on where you live (including under India's DPDP Act and the EU/UK GDPR), you may have rights to access, correct, delete, or export your data, and to withdraw consent. Email us and we will honour them. If you are in the EU/UK you may also lodge a complaint with your supervisory authority.

Loop is for Instagram professional accounts and is not directed at children. We do not knowingly collect data from anyone under 18.

If we change this policy, we will update this page and the date at the top, and notify you in the app for material changes. The current version always lives at this URL.