Privacy Policy
Effective: September 2026
At Uprank.ai, we treat your privacy and data sovereignty with highest engineering rigor. This Privacy Policy details how we collect, process, and safeguard information when you connect Instagram accounts or participate in automated comment-to-DM funnels.
1. Information We Process
We process only data strictly necessary to execute Instagram comment-to-DM workflows:
| Data Type | Source | Operational Purpose |
|---|---|---|
| Instagram Scoped ID (IGSID) & Handle | Commenters & Message Senders | Routing direct messages and maintaining campaign step state. |
| Comment Content | Instagram Media Webhooks | Evaluating trigger keyword matches & preventing duplicate dispatches. |
| Follow Status | Meta Graph API | Evaluating follower-gate criteria before releasing gated assets. |
| Email Address (Optional) | Provided voluntarily via DM | Lead capture and exporting to connected CRM webhooks. |
2. Meta Platform Compliance & Security
All data transactions utilize official Meta Graph API v23.0 endpoints over TLS 1.3 encryption. Access tokens are encrypted using AES-256-GCM at rest inside Cloudflare's secure key-value / relational vault. We never sell, rent, or monetize your audience data.
3. Data Retention & Deletion
Campaign logs and captured contacts are stored under your direct account ownership. You can permanently export or purge contacts at any time. For Meta-mandated data deletion callbacks, refer to our Data Deletion Policy.
4. Third-Party Integrations
If you configure external webhooks (e.g. Zapier, Make, Klaviyo), data is forwarded securely according to your configured endpoints. Uprank.ai is not responsible for policies of third-party platforms you connect.
5. Contact Our Data Protection Officer
To exercise your GDPR/CCPA data rights or request account removal, please email privacy@uprank.ai.