Privacy policy

FollowGate is operated by [Your registered company name] ("we"). This policy explains what we collect when a business connects its Instagram account to FollowGate, and when someone interacts with that business's posts or messages.

Businesses that connect an Instagram account

• Your Instagram professional account id and username, and an access token Instagram issues to us. The token is encrypted with a dedicated key and is used only to run your campaigns.
• The campaigns you configure: keywords, messages and links.
• Billing details are handled by our payment processor (Razorpay). We store your subscription id and status, never card or bank details.

People who comment on or message a connected account

• When you comment a campaign keyword, we process the comment text, your Instagram-scoped id and username to send you the private reply you asked for.
• We check whether you follow the business account, only when you ask us to (for example, by tapping "I followed").
• We record which messages were sent, whether the link was delivered and opened, and, if you choose to enter it on a landing page, your email address.
• Reply STOP at any time and we will never message you again from any campaign.

How we use it

Only to provide the service: replying to comments, delivering the requested link, and showing the business its own campaign results and lead list. We do not sell personal data or use it for advertising.

Who we share it with

The business whose post you interacted with sees your username, campaign progress and any email you entered. Our infrastructure runs on Amazon Web Services (Mumbai region). Messages are sent through Meta's official Instagram API. Payments are processed by Razorpay.

How long we keep it

Message history is deleted after 180 days. Lead records stay until the business deletes them or disconnects. Disconnecting or deleting your account removes all of its data, normally within minutes.

Deleting your data

Businesses can delete everything from the Account page, or by removing FollowGate in Instagram's settings, which triggers our data-deletion process automatically. Anyone else can ask us to delete their data at privacy@tendersagent.com.

Security

Data is encrypted in transit and at rest. Access tokens are additionally encrypted with a key-management service, and every webhook from Instagram is signature-verified.

Contact

[Your registered company name] · privacy@tendersagent.com