Privacy Policy

This Privacy Policy describes how Maedix ("we", "us", or "our") collects, uses, and shares your personal information when you use our Instagram automation service for comment replies and direct messages.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• First and last name
• Password (encrypted)
• Profile information (bio, location) - optional

1.2 Instagram Account Data

When you connect your Instagram account, we collect:

• Instagram Business/Creator Account ID and username
• Access tokens for API interactions
• Post IDs for automation configuration
• Comment data (to trigger automated responses)

1.3 Automation Data

We store your automation configurations:

• Comment reply messages you configure
• Follow-up DM messages you configure
• Trigger keywords and settings
• Automation activity logs

1.4 Payment Information

When you make purchases, our payment processor (Razorpay) collects payment details. We store:

• Transaction IDs and order references
• Subscription status and billing cycle
• We do NOT store your credit card numbers or bank details

2. How We Use Your Information

We use the collected information to:

• Provide and maintain our Instagram automation service
• Automatically reply to comments on your Instagram posts
• Send automated direct messages to commenters on your behalf
• Process payments and manage subscriptions
• Send verification emails and important service updates
• Monitor automation performance and provide analytics
• Improve and personalize your experience
• Display public metrics and social proof: We may publicly display aggregated platform statistics (such as total comments processed, DMs sent) along with Instagram usernames and profile pictures of active users on our website for social proof and marketing purposes

3. Third-Party Services

We integrate with the following third-party services:

3.1 Instagram (Meta)

When you connect your Instagram account, we use Meta's Instagram Graph API to:

• Receive webhook notifications for new comments
• Post comment replies on your behalf
• Send direct messages to users who comment on your posts

We access your Instagram Business/Creator Account according to Meta's Platform Terms. You can disconnect your account at any time from your dashboard.

3.2 Razorpay

We use Razorpay for payment processing. Your payment information is handled directly by Razorpay according to their privacy policy. We only receive confirmation of successful transactions.

3.3 Amazon Web Services (AWS)

We use AWS to host our application and securely store your data with industry-standard encryption and access controls.

3.4 Email Service

We use email services to send verification codes (OTP), password reset links, and important account notifications.

4. Data Storage and Security

• All data is transmitted over HTTPS encryption
• Passwords are hashed using industry-standard algorithms
• Instagram OAuth tokens are encrypted at rest
• We regularly review and update our security practices
• Access to user data is restricted to authorized personnel only

5. Data Sharing

We do NOT sell your personal information. We may share data:

• With Instagram/Meta to perform automation actions on your behalf
• With service providers who assist in our operations (as listed above)
• To comply with legal obligations or court orders
• To protect our rights and prevent fraud

5.1 Public Display of Platform Metrics

To demonstrate platform activity and provide social proof, we may publicly display on our website:

• Your Instagram username and profile picture
• Aggregated automation statistics (e.g., number of comments and DMs processed through our platform)
• Activity indicators showing active users

This information is derived from your connected Instagram account and our API logs. By using our service, you consent to this public display. If you prefer not to be featured, please contact us to opt out.

6. Your Rights and Choices

You have the right to:

• Access: View your personal data through your dashboard
• Correct: Update your profile information anytime
• Delete: Request deletion of your account and associated data
• Disconnect: Remove your Instagram connection from your dashboard
• Disable: Turn off automations at any time
• Opt-out: Unsubscribe from marketing emails
• Opt-out of public display: Request removal of your Instagram username and profile picture from public metrics displayed on our website by contacting us

7. Data Retention

We retain your data for as long as your account is active. After account deletion:

• Personal data is deleted within 30 days
• Automation configurations are deleted immediately
• Instagram access tokens are revoked
• Anonymized usage statistics may be retained for analytics

8. Cookies and Tracking

We use essential cookies for:

• Session management and authentication
• Remembering your preferences
• Security and fraud prevention

9. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform. Continued use of our services after changes constitutes acceptance of the updated policy.