Privacy Policy

1. Introduction

Convly ("we", "our", "the service") is a SaaS platform that helps creators and small businesses manage Instagram interaction automation, including comment replies, available DM automation, message templates, activity logs, basic analytics, billing, and user feedback.

This Privacy Policy explains what data we collect, how we use it, and the choices available to you.

2. Data We Collect

We only collect data needed to operate and secure the service:

• Convly Account Data: name, email address, securely processed password, login sessions, and basic account preferences.
• Instagram Connection Data: Instagram user ID, username, access token, connection status, and account information provided through Meta/Instagram's official OAuth flow.
• Automation Data: keyword rules, trigger configuration, comment reply templates, DM templates, follow-gate/pre-gate messages, available quick replies, and campaign settings you create.
• Activity & Log Data: automation history, success/failure status, timestamps, triggered rules, public usernames that interacted with your account, and technical details needed for monitoring or debugging.
• Billing Data: plan, subscription status, invoice/payment references, and payment status. Sensitive payment details are processed by the payment gateway and are not stored by us as raw card/bank data.
• Feedback Data: feedback messages, categories, rating/priority when available, follow-up status, and basic metadata so we can respond and improve the product.
• Technical & Analytics Data: general device/browser information, visited pages, product usage events, timestamps, error logs, and performance data to improve service stability.

3. How We Use Your Data

We use your data to:

• Provide Convly features based on your configuration.
• Connect and maintain your Instagram connection status.
• Run the comment/DM automations you enable and store their activity logs.
• Display your dashboard, activity history, basic analytics, billing, and feedback.
• Secure accounts, prevent abuse, and debug issues.
• Send important service notifications, such as connection status, billing, or policy updates.
• Improve Convly's performance, onboarding, and user experience.

4. Instagram/Meta API Usage

Convly uses official Meta/Instagram APIs for features that require an Instagram connection. By connecting your Instagram account, you authorize Convly to access data and perform actions required by the features you enable, such as reading relevant interactions, replying to comments, or sending DMs according to your configuration.

5. Third-Party Services

Convly may use third-party services to operate the product, including database storage, hosting, authentication, payment gateway, email, analytics, and Meta/Instagram integrations. These providers receive only the data needed for their respective functions and are governed by their own policies.

6. Data Storage & Security

We apply reasonable security measures, including access controls, encrypted connections, and user data separation. Application data is stored in managed databases and internal access is limited to operational needs.

7. Data Retention & Deletion

Data is retained while your account is active or as long as needed to provide the service, meet legal obligations, resolve disputes, prevent abuse, or maintain transaction records.

If you request data deletion, we will delete or anonymize data that is no longer required within a reasonable time. Certain data such as invoices, audit logs, or security records may be retained longer when required by law or legitimate operational needs.

8. Your Rights

You may:

• Access the data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account or related data.
• Revoke Instagram access at any time.
• Contact us with privacy questions or data requests.

9. Policy Changes

We may update this Privacy Policy from time to time to reflect Convly's development, feature changes, or legal requirements. Significant changes will be communicated by email, dashboard notice, or this page.

10. Contact

Questions or requests regarding this Privacy Policy can be sent to: satriabahari.dev@gmail.com