Privacy Policy

This Privacy Policy explains how QuickDM collects, uses, shares, and protects personal information when you use our website, dashboard, and Instagram automation services (the “Service”). By using the Service, you agree to this policy. If you do not agree, do not use the Service.

1. Who we are

QuickDM provides tools that help Instagram creators and businesses automate comment replies, direct messages (DMs), follow gates, and related lead capture flows using official Meta APIs.

Contact for privacy requests: privacy@quickdm.store

General support: support@quickdm.store

2. Information we collect

2.1 Information you provide

• Account details such as name, email address, password (hashed), and billing contact information.
• Payment information processed by our payment provider (we do not store full card numbers on our servers).
• Content you configure in the Service: automation rules, keywords, message templates, and lead fields.
• Communications you send us (support emails, deletion requests, feedback).

2.2 Information from Instagram / Meta

When you connect an Instagram Business or Creator account, we may receive and process, as authorized by you and Meta’s permissions:

• Instagram user ID, username, profile name, profile picture URL, and account type.
• Page and Instagram account linkage metadata needed to call the Graph API.
• Comments on media you manage (comment ID, text, timestamp, commenter identifiers needed to reply or DM).
• Direct message conversation content and metadata required to send and receive automated messages you configure.
• Follow / relationship status when you enable follow-gate features, to the extent available via permitted API fields.
• Access tokens and token expiry metadata for API authentication.

We only request Graph API permissions that are necessary for the features you enable (for example, managing comments and messages). We do not sell Instagram user data.

2.3 Information from people who interact with your automations

If someone comments on or messages an account that uses QuickDM, we may process:

• Public Instagram identifiers and message/comment content involved in the automation.
• Email addresses or other fields they voluntarily submit through a DM data collection flow you configure.

You (the account owner) are responsible for providing any notices or consents required under applicable law for collecting data from those individuals.

2.4 Automatically collected technical data

• Log data: IP address, browser type, device type, pages viewed, referring URL, and timestamps.
• Cookies or similar technologies for authentication, preferences, and analytics (see Section 7).

3. How we use information

We use personal information to:

• Provide, operate, and improve the Service and automations.
• Authenticate accounts, maintain sessions, and secure the platform.
• Send transactional emails (account, billing, security, service notices).
• Process payments and prevent fraud or abuse.
• Comply with law, Meta Platform Terms, and respond to lawful requests.
• Analyze aggregate usage to improve product reliability (we avoid using message content for unrelated advertising).

We do not use Instagram data obtained via the Graph API to build advertising profiles for sale to third parties, and we do not use that data for purposes unrelated to providing the Service you requested.

4. Legal bases (where applicable)

If you are in a region that requires a legal basis for processing (for example, the EEA/UK), we rely on: (a) performance of a contract with you; (b) legitimate interests in operating a secure SaaS product; (c) consent where required (for example, certain cookies or optional marketing); and (d) legal obligations.

5. How we share information

We may share information with:

• Service providers who process data on our behalf (hosting, databases, email delivery, payment processing, error monitoring, analytics). They are bound by contractual confidentiality and may only process data per our instructions.
• Meta Platforms, when you use Instagram features, under Meta’s terms and the permissions you grant.
• Professional advisors (legal, accounting) under confidentiality when needed.
• Authorities when required by law or to protect rights, safety, and security.
• Business transfers: if we merge, sell, or restructure, data may transfer under continued protection commitments.

We do not sell personal information as “sale” is commonly defined under US state privacy laws. We do not share Instagram data with unrelated third parties for their independent marketing.

6. Data retention

We retain personal information only as long as needed for the purposes described in this policy, including:

• Account data: for the life of the account, then deleted or anonymized within a reasonable period after closure (typically within 30 days, unless law requires longer retention of billing records).
• Automation logs, comments, and message content processed for features: retained as needed to operate, debug, and provide history you expect, then deleted or aggregated on a rolling schedule.
• Access tokens: stored securely and revoked/deleted when you disconnect Instagram or delete your account.

You can request deletion at any time via our Data Deletion page or privacy@quickdm.store.

7. Cookies and similar technologies

We use essential cookies for login and security. We may use limited analytics cookies to understand product usage. You can control cookies in your browser settings; disabling essential cookies may break sign-in.

8. Security

We implement industry-standard measures appropriate to the risk, including encrypted transport (HTTPS), access controls, hashed passwords, and least privilege for production systems. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. International transfers

We may process data on servers located outside your country (for example, in the United States, India, or the European Union, depending on our hosting providers). Where required, we use appropriate safeguards for cross-border transfers.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to object to certain processing or withdraw consent. To exercise these rights, email privacy@quickdm.store. We may need to verify your identity. You may also have the right to lodge a complaint with a supervisory authority.

11. Children’s privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will take appropriate steps to delete it.

12. Instagram / Meta-specific commitments

• We use Instagram platform data only to provide and improve the features you enable.
• We do not transfer Instagram data to third parties except as necessary to provide the Service (infrastructure processors) or as required by law.
• Users can request deletion of their QuickDM data; see Data Deletion Instructions.
• Disconnecting Instagram from the dashboard revokes our practical ability to call the API on your behalf; residual logs may remain until deletion schedules or a deletion request complete.

13. Third-party links

The Service may link to third-party sites (including Instagram and payment providers). Their privacy practices are governed by their own policies.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated “Last updated” date. Material changes may be communicated by email or in-product notice when appropriate. Continued use after the effective date constitutes acceptance of the updated policy.

15. Contact

Privacy questions and requests: privacy@quickdm.store
Website: https://quickdm.store
Data deletion: https://quickdm.store/data-deletion.html