Creomatrix ("Amplaya", "we", "us") operates Amplaya, a tool that automates replies to Instagram comments and direct messages on Instagram professional accounts you connect. This policy explains what we collect, why, and how to delete it.

Information we collect

Account & profile. Your name and email when you create a Amplaya account.
Instagram data, with your authorization. When you connect an Instagram professional account via Facebook Login, we receive your Instagram business account id and username, the comments and direct messages needed to run the automations you configure, and an access token. Access tokens are stored encrypted (AES-256-GCM).
Automation activity. Records of inbound events we processed and replies we sent, so you can audit your automations.

How we use it

To run the comment-reply, comment-to-DM (private reply), and DM-reply automations you set up.
To respect Instagram's messaging windows and policies.
To show you logs and let you manage connected accounts.

We do not sell your data, and we do not use your Instagram content for advertising.

Sharing

We share data with Meta Platforms, Inc. only as required to operate the Instagram integration through the official Instagram Graph API. We use infrastructure providers (hosting, database) bound to process data on our behalf. We may disclose data if required by law.

Retention & deletion

We keep connection and activity data while your account is active. You can disconnect an Instagram account at any time in Amplaya settings, which deletes its stored token. To delete all data associated with your Facebook user, remove Amplaya from your Facebook settings (which triggers our deauthorize callback) or submit a deletion request — see our data deletion page. We honor Meta's Data Deletion Request callback automatically.

Security

Access tokens are encrypted at rest, all traffic is over HTTPS, and webhook payloads are verified with Meta's signature before processing.

Contact

Questions or requests: support@amplaya.com.