Legal

Privacy Policy

Last updated: 27 June 2026

This Privacy Policy describes how ZentroDM("we", "us", or "our") collects, uses, and shares information about you when you use our services. By using ZentroDM, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Personal Data

While using our service, we may ask you to provide certain personally identifiable information:

  • Email address and name
  • Phone number (optional)
  • Billing and payment details (processed via Razorpay)
  • Instagram account identifiers (Page ID, access tokens)
  • Usage data and analytics

Usage Data

We automatically collect usage data such as your IP address, browser type, pages visited, time spent on pages, and other diagnostic data when you use our service.

Instagram & Meta Data

When you connect your Instagram Professional account via the Meta Graph API, we access the following data solely to operate the automation features you configure:

  • Instagram account identifiers (User ID, Page ID, username)
  • Access tokens required to act on your behalf via the Meta Graph API
  • Instagram comments — We read comments posted on your Instagram media to detect user-configured trigger keywords. We may reply to, hide, or manage comments strictly as directed by your automation rules. Comment text and commenter metadata are processed transiently and are not stored beyond what is required to execute the configured automation.
  • Instagram Direct Messages (DMs) — We send automated DMs to users who trigger your configured workflows (e.g., by commenting with a keyword). We read incoming messages only to identify replies relevant to active automation flows.
  • Basic account metadata (follower count, media count) used solely to display analytics within your ZentroDM dashboard.

We do not sell, transfer, or use Instagram data for advertising, profiling, or any purpose beyond delivering the automation service you have explicitly configured.

2. How We Use Your Information

  • To provide, operate, and maintain our service
  • To manage your account and subscription
  • To read Instagram comments and detect trigger keywords as configured by you
  • To send automated Instagram DMs on your behalf based on your automation rules
  • To reply to, hide, or manage Instagram comments strictly as per your configured rules
  • To send transactional emails, usage alerts, and product updates
  • To process payments via Razorpay
  • To analyse usage trends and improve the platform
  • To comply with legal obligations

3. Sharing of Information

We do not sell your personal information. We may share data with:

  • Service Providers: Razorpay (payments), MongoDB Atlas (database), Vercel (hosting), and similar infrastructure providers under data processing agreements.
  • Meta / Instagram: As required to deliver the automation service via the Meta Graph API.
  • Law Enforcement: When required by applicable law or to protect our legal rights.

4. Cookies & Tracking

We use cookies and similar tracking technologies to maintain your session, remember preferences, and analyse traffic. You can configure your browser to refuse cookies, but some features of the service may not work correctly without them.

5. Instagram Permissions We Use

ZentroDM requests the following Meta / Instagram permissions to deliver its core features:

  • instagram_business_basic — To read your Instagram account profile and media information for display in your dashboard.
  • instagram_business_manage_messages — To send automated Direct Messages to users who trigger your configured keyword or comment workflows.
  • instagram_business_manage_comments — To read comments on your Instagram posts in order to detect trigger keywords, and to reply to or hide comments strictly according to the automation rules you set up. We do not delete comments unless you explicitly configure a rule to do so.

You may revoke these permissions at any time by disconnecting your Instagram account from within the ZentroDM dashboard or through your Instagram account settings. Revoking permissions will disable the corresponding automation features.

6. Data Retention

We retain your personal data only as long as necessary to provide the service or as required by law. On account deletion, your data is removed within 30 days, except where retention is legally required.

Instagram comment and message data is processed transiently to execute automations and is not stored beyond the immediate operational need. Automation logs (e.g., which keyword triggered which DM) may be retained for up to 90 days to support your dashboard analytics, after which they are permanently deleted.

7. Data Security

We use industry-standard security measures including encryption in transit (TLS), hashed passwords, and restricted access controls. However, no method of transmission over the Internet is 100% secure.

8. Children's Privacy

Our service is not directed to anyone under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will remove it promptly.

9. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Withdraw consent for processing at any time
  • Lodge a complaint with relevant data protection authorities

To exercise any of these rights, email us at support@zentrodm.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. Continued use of the service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us at support@zentrodm.com or visit our Contact page.