Privacy Policy

1. Introduction

Convly ("we", "our", "the service") is a SaaS platform that helps creators, sellers, and small teams manage Instagram interaction automation, including comment replies, DM automation, message templates, lead capture, campaign resources, activity logs, analytics, billing, and feedback.

This Privacy Policy explains what data we collect, why we use it, how we share it with service providers, how long we keep it, and how you can request access, correction, disconnection, or deletion.

2. Data We Collect

We collect the data needed to operate, secure, troubleshoot, and improve Convly:

• Convly account data: name, email address, authentication data, login sessions, account preferences, workspace membership, and support/contact history.
• Instagram/Meta connection data: Instagram user ID, username, profile/account information, page/account connection status, permissions granted through Meta's OAuth flow, access tokens, and token health metadata.
• Automation and campaign data: keyword rules, triggers, comment reply templates, DM templates, quick replies, buttons, resources, campaign settings, follow-gate/pre-gate messages, and other configuration you create.
• Interaction and activity logs: timestamps, automation status, matched rules, message/comment delivery status, public usernames or IDs that interacted with your connected account, error states, rate-limit states, and diagnostic metadata.
• Lead and resource data: email addresses, phone or WhatsApp numbers, resource links, campaign attribution, and click/activity metadata when you configure Convly to collect or track them.
• Billing data: plan, subscription status, invoice/payment references, payment status, and billing-related metadata. Sensitive card, bank, or wallet details are handled by the payment provider and are not stored by Convly as raw payment credentials.
• Feedback and support data: feedback messages, ratings, categories, priorities, screenshots or attachments you provide, follow-up status, and support communications.
• Technical, analytics, and security data: browser/device information, IP-derived security metadata, visited pages, product usage events, timestamps, error logs, performance data, and abuse-prevention signals.

3. How We Use Your Data

We use your data to:

• Provide the Convly features you configure.
• Connect, maintain, and troubleshoot your Instagram/Meta integration.
• Run comment replies, DMs, lead capture, resource delivery, campaigns, and automation logs.
• Display dashboards, analytics, billing status, support history, and account settings.
• Secure accounts, prevent abuse, detect suspicious behavior, debug incidents, and enforce usage limits.
• Send important service notifications about account access, Instagram connection status, billing, security, support, or policy changes.
• Improve onboarding, reliability, product performance, and user experience.

4. Instagram/Meta API Usage

Convly uses official Meta/Instagram APIs for features that require an Instagram connection. By connecting your Instagram account, you authorize Convly to access data and perform actions required by the features you enable, such as reading relevant interactions, replying to comments, sending DMs, checking delivery status, and maintaining integration health.

Convly only uses Instagram/Meta data to operate the product, maintain security, troubleshoot issues, comply with platform requirements, and provide features you choose to enable.

5. Third-Party Services

Convly may use third-party providers for hosting, database storage, authentication, payments, email, analytics, monitoring, support, and Meta/Instagram integrations. These providers receive only the data needed to perform their function and are governed by their own policies and security commitments.

We may disclose information when required to comply with law, enforce our terms, protect users, investigate abuse, or respond to valid legal requests.

6. Data Storage & Security

We apply reasonable technical and organizational safeguards, including access controls, encrypted connections, managed infrastructure, separation of user data, and limited internal access based on operational need.

7. Data Retention & Deletion

We keep data while your account is active or as long as needed to provide Convly, maintain security, resolve disputes, comply with legal obligations, keep transaction records, or prevent abuse.

When you request deletion, we will delete or anonymize data that is no longer required within a reasonable time. Some records may be retained longer when required for billing, tax, fraud prevention, security, audit logs, legal claims, or backup recovery. Backup copies may take additional time to expire through normal backup rotation.

Deleting Convly data does not automatically delete data already stored by Meta/Instagram, message recipients, payment providers, email providers, or other third-party services.

8. Your Choices and Rights

Depending on your location and the data involved, you may be able to:

• Access data we hold about you.
• Correct inaccurate account or workspace data.
• Request deletion of your account or related Convly data.
• Disconnect or revoke Instagram/Meta access.
• Object to or limit certain processing where applicable.
• Ask questions about retention, providers, or data handling.

9. Policy Changes

We may update this Privacy Policy to reflect product changes, legal requirements, provider changes, or security improvements. Significant changes will be communicated through email, dashboard notice, or this page when appropriate.

10. Contact

Questions or requests regarding this Privacy Policy can be sent to: satriabahari.dev@gmail.com