Privacy Policy

1. Overview

Zouri ("we", "our", or "us") provides an Instagram automation platform that allows businesses and creators to automate DMs and engage with their audience. This Privacy Policy explains how we collect, use, and protect your information when you use our service at zouri.vercel.app.

2. Information We Collect

• Account information: Email address and authentication details via Clerk.
• Instagram account data: Instagram username, user ID, and access tokens obtained through Instagram Business Login. We use these solely to send automated DMs and monitor comments on your behalf.
• Contact data: Instagram user IDs and usernames of people who interact with your account (comments, DMs, story replies). We do not store the content of incoming messages.
• Automation activity: Records of messages sent, automation rules, and delivery status.

3. How We Use Your Information

• To operate the automation service and send DMs on your behalf.
• To enforce deduplication rules and respect Instagram's 24-hour messaging window.
• To display dashboard analytics about your automation activity.
• We do not sell your data or use it for advertising.

4. Instagram Data

We access your Instagram account through Meta's Instagram Business Login API. We request only the permissions necessary to send messages and monitor comments (instagram_business_basic, instagram_business_manage_messages, instagram_business_manage_comments). Access tokens are stored securely and are never shared with third parties. You can disconnect your Instagram account at any time from the Settings page, which will revoke our access.

5. Data Deletion

You can request deletion of your data at any time by emailing us at kasandradarwin@gmail.com. We will delete your account, connected Instagram accounts, contacts, and automation history within 30 days. Instagram users whose data we hold may also request deletion by contacting us at the same address.

6. Data Security

Your data is stored in a secured Neon PostgreSQL database. Access tokens are stored at rest and access is restricted to authenticated users. We use HTTPS for all data in transit.

7. Third-Party Services

We use the following third-party services to operate Zouri:

• Clerk — user authentication
• Neon — database hosting
• Vercel — application hosting
• Meta (Instagram Graph API) — Instagram account access

8. Contact

For questions or data requests, contact us at kasandradarwin@gmail.com.