Last updated: 1 November 2026
ReplySell is operated by Krypton Forge Labs LLP ("we"). This policy explains what data we collect when you use ReplySell to automate Instagram direct messages and comment replies, why we collect it, and how you can delete it.
Your account: name, email address and a hashed password.
Your connected Instagram professional account, with your permission through Meta's login: account ID, username, linked Facebook Page (if you use Facebook Login), and access tokens that let ReplySell send messages on your behalf.
Conversations with your audience: messages, comments, story replies and mentions that Instagram sends to ReplySell for your account, and the Instagram-scoped ID, username and name of the people who interact with you.
Data you create: automations, tags, custom fields, segments, broadcasts and sequences.
Billing: handled by Stripe. We store your plan and Stripe customer ID, never your card number.
Only to provide the service you configure: receive Instagram events, run your automations, send replies, show your inbox and analytics, and keep your Instagram connection active.
We do not sell data, use it for advertising, or use your audience's messages for any purpose other than running your automations.
If you turn on AI features, the relevant message text is sent to our AI model provider to generate a reply or detect intent, and is not used by us for anything else.
We use Meta Platform data only as allowed by Meta's Platform Terms and Developer Policies, and only for the features you use.
You can remove ReplySell's access at any time in Instagram (Settings → Website permissions / Apps and websites) or in Meta Business settings. When access is removed or you disconnect the account, we stop processing new data for it.
Service providers that process data for us under contract: Meta (to send and receive Instagram messages), Stripe (payments), our email provider (account emails), our AI model provider (only if you enable AI features), and our hosting provider. We share data with authorities only when the law requires it.
Data is stored on secured servers; connections are encrypted in transit (HTTPS). Access tokens are used only by our servers and never shown in the app.
We keep your data while your account is active. When you delete an automation, contact or your account, the data is removed from our database.
You can view, export (contacts CSV) and delete your data in the app, or ask us to delete everything — see Data deletion. Contact us at ankur@kryptonforge.in for any privacy request; we reply within 30 days.
We use only the cookies needed for sign-in, security (OAuth state) and your session. No advertising or tracking cookies.
We will update this page and the date above if this policy changes. Questions: Krypton Forge Labs LLP, ankur@kryptonforge.in.