What RelayDM Is
RelayDM is a cloud-based software-as-a-service (SaaS) automation platform designed for Instagram Business and Creator accounts. We help creators, brands, and businesses automate Instagram comment-to-DM workflows, message handling, follow-ups, link delivery, and related performance analytics. In operating the service, RelayDM acts as a data controller for your account, workspace, and billing data, and as a data processor for the audience and comment interactions processed on behalf of your connected Instagram account.
Information We Collect
We collect only information necessary to deliver, maintain, and secure RelayDM. The categories of data we process include: • Account Registration & Profile Data: Your name, email address, workspace configuration, and authentication identifiers handled through our secure authentication infrastructure. • Connected Instagram Professional Account Data: Instagram username, professional account ID, follower counts, and account connection status. • Instagram Media & Post Data: Instagram post IDs, Reel IDs, media types, captions, permalinks, and publication timestamps synced to enable post-specific automation targeting. • Comments & Interaction Data: Comment IDs, comment text, commenter usernames, commenter scoped user IDs, and timestamps received via official Meta webhooks. • Automation Configuration: Keyword rules, trigger parameters, message templates, follow-up sequences, and destination link settings configured by workspace users. • Link Tracking & Analytics Data: Click timestamps, referral origin domains, tracked slot identifiers, and anonymized/hashed visitor metrics used exclusively to count unique clicks. We do not store raw visitor IP addresses or full destination tracking profiles. • Billing & Subscription Data: Subscription tier, payment status, quota usage counters, renewal dates, and payment identifiers provided by authorized payment processors (Razorpay and Stripe). We never collect or store full credit card numbers or banking credentials. • Technical & Operational Logs: System audit logs, API response codes, webhook delivery receipts, browser user-agent strings, and diagnostic telemetry used to ensure platform reliability. • Customer Support Communications: Messages, support inquiries, bug reports, and diagnostic details submitted when communicating with our team.
Instagram & Meta API Data
RelayDM connects to Instagram exclusively through Meta’s official Instagram Graph APIs and OAuth 2.0 authorization framework. • No Passwords Requested or Stored: We never ask for, collect, or store your Instagram password. Connection is established entirely through Meta's official OAuth consent screen. • Granular Permissions: You explicitly review and grant specific permissions during connection (such as profile basic access, reading comments, and sending direct messages). • Secure Token Storage: Access tokens issued by Meta are encrypted and stored securely server-side with restricted access. Access tokens are never transmitted to client browsers or exposed in public code. • Purpose Limitation: Instagram data is utilized exclusively to execute user-configured automations, synchronize media metadata, deliver messages, prevent duplicate actions, and display analytics within your workspace. • No Data Selling: We do not sell, rent, monetize, or broker Instagram account data, commenter data, or audience information to third parties or advertising data brokers.
How We Use Information
We process data for specific, legitimate business purposes: • To operate, maintain, and provide the RelayDM web application and automation engine. • To connect and synchronize your Instagram professional accounts and published media. • To detect configured keywords on comments, messages, or Story interactions. • To dispatch authorized direct messages, private replies, and follow-ups. • To compute delivery counts, click-through rates, and audience conversion analytics. • To enforce monthly automated message limits and plan quota thresholds. • To detect, investigate, and prevent fraud, spam, API abuse, or security incidents. • To provide customer support, troubleshoot delivery issues, and communicate service updates. • To comply with applicable accounting, tax, legal, and regulatory obligations.
Legal Basis and User Consent
We process personal data based on the necessity of performing our agreement with you (providing RelayDM under our Terms of Service), our legitimate business interests in maintaining a secure and reliable platform, and user consent provided when connecting your Instagram account or configuring automated workflows. You maintain ongoing control over your connected accounts and may disconnect or revoke permissions at any time.
Data Sharing and Service Providers
We do not sell personal information. We share data only with third-party service providers and infrastructure partners strictly necessary to operate RelayDM: • Meta / Instagram: To query Graph API endpoints, receive webhooks, and transmit direct messages and replies you configure. • Razorpay: Payment gateway processing INR subscription billing and recurring mandates for Indian customers. • Stripe: Payment processor retained for existing Stripe subscription support, reconciliation, and billing records; it is not used for new subscriptions during the India-only launch. • Hosting & Infrastructure Providers: Cloud hosting, serverless execution (such as Lovable Cloud / Cloudflare Workers), and managed database infrastructure (Supabase PostgreSQL) used to store and execute application logic. • Email & Communication Services: Providers assisting with transactional email delivery, password resets, and support ticket routing. We may also disclose data where required by law, subpoena, court order, or governmental regulation, or to protect the vital rights, safety, and property of RelayDM and our users.
Data Retention
• Active Workspaces: Account information, workspace settings, and active automations are retained for as long as your workspace remains active. • Access Tokens: OAuth access tokens remain active until you disconnect your account, revoke permissions through Instagram, cancel your workspace, or when tokens expire. • Delivery & Webhook Logs: Event logs, webhook receipts, and delivery records are retained for security auditing, deduplication, and analytics reporting, subject to the retention lookback period of your active plan tier. • Financial & Billing Records: Transaction records, invoices, and payment confirmations are retained for the duration required by applicable financial, accounting, and tax regulations. • Deletion Requests: When an account or data deletion request is submitted, operational data is removed or anonymized promptly, subject only to mandatory legal retention.
Data Security Safeguards
We maintain reasonable administrative, organizational, and technical safeguards designed to protect personal data against unauthorized access, destruction, loss, alteration, or disclosure. Access tokens, database secrets, and API credentials are kept server-side in isolated, encrypted runtime environments. However, no method of transmission over the Internet or electronic storage system can be guaranteed to be 100% secure. While we take commercial care to protect your data, we cannot guarantee absolute security against all unforeseen risks.
Your Rights and Choices
Depending on your location, you may have rights regarding your personal information, including the right to: • Access: Request a copy of the personal information we maintain about you. • Correction: Update or rectify incomplete or inaccurate workspace details. • Deletion: Request the permanent deletion of your account and connected Instagram data. • Disconnection: Remove your connected Instagram account at any time from your Integrations settings. • Withdrawal of Consent: Revoke permissions previously granted through Meta's authorization dialogues. To exercise your deletion rights, visit our dedicated instructions page at https://relaydm.app/data-deletion or contact us directly at relaydmsupport@gmail.com.
Children’s Privacy
RelayDM is intended solely for business and professional users capable of forming legally binding contracts. We do not knowingly collect, solicit, or maintain personal information from individuals under the age of 18 or the applicable age of majority in their jurisdiction. If we learn that we have inadvertently collected personal data from a child, we will take prompt steps to delete that information.
International Data Transfers
Our cloud infrastructure, database providers, and API partners operate servers in multiple regions across the globe. By using RelayDM, you understand and acknowledge that your data may be transferred, stored, and processed in jurisdictions outside of your country of residence, where data protection standards may differ.
Changes to This Privacy Policy
We may revise this Privacy Policy from time to time to reflect modifications in our software, Meta's platform policies, or relevant legal requirements. When updates are published, we will revise the "Last updated" date at the top of this document. Material changes will be highlighted through dashboard notices or communicated directly via email.
Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us at: Email: relaydmsupport@gmail.com Support & Contact: https://relaydm.app/contact Data Deletion Instructions: https://relaydm.app/data-deletion