Privacy Policy
Gr8Vine ("we") helps Instagram creators and businesses automatically reply to comments and direct messages. This policy explains what data we handle when a creator connects their Instagram professional account, and when people interact with that account.
Data we collect
- Connected account data: the Instagram professional account ID, username, and the access token Instagram issues when the account owner connects Gr8Vine.
- Interaction data: when someone comments on or messages a connected account, we receive the comment or message text, their Instagram-scoped ID, their username (for comments), the related post ID, and timestamps.
- Automation data: the automations the account owner creates, which messages were sent, and tags applied to contacts.
How we use it
- To detect keywords and send the replies and messages the account owner configured.
- To prevent duplicate messages and show the account owner which automations ran.
- To troubleshoot errors and keep the service secure.
We do not sell personal data, use it for advertising, or share it with third parties except the service providers that host Gr8Vine (Vercel for hosting and Supabase for the database), who process it only on our behalf.
Instagram Platform data
We access Instagram data only through Meta's official APIs, only for accounts whose owners have connected Gr8Vine, and only as described here. We comply with the Meta Platform Terms and Developer Policies.
Retention
We keep interaction and automation data while the account remains connected. When an account owner disconnects Gr8Vine or asks us to delete their data, we delete their account data, contacts, and message logs within 30 days.
Security
Data is encrypted in transit. Database access is restricted to Gr8Vine's servers, and access tokens are never exposed to the browser.
Your choices
You can request access to or deletion of your data at any time. See Data deletion or email support@gr8vine.com.
Changes
If we change this policy, we will update the effective date above.