1. Introduction

IGSender ("we", "us", "our") is operated by Growthlinker Private Limited, a company registered in India with its office at 4th Floor, Ashirvad Store, Adityapur Main Road, Opp. Durian Furniture, Jamshedpur, Jharkhand 831013, India. We provide Instagram automation tools at igsender.com that allow our users to automate direct messages, manage conversations, and analyze engagement on their own Instagram Business or Creator accounts.

This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using IGSender, you agree to the practices described here.

2. Information we collect

Account information. When you sign up we collect your name, email address, profile picture (if signing in with Google), and an authentication identifier from our login provider (Firebase Authentication).

Instagram data. When you connect an Instagram account, we receive — through the official Meta Graph API and only with your explicit consent — your Instagram username, profile ID, profile picture, a long-lived access token, the list of media you publish, comments and direct messages that trigger your automations, and basic engagement metrics.

Contact data. When Instagram users voluntarily reply to your automated DM campaigns with their contact information (such as an email address or phone number), that information is stored against your account so you can view and export it. These users are aware they are sharing information in response to your campaign message. As a campaign owner, you are responsible for ensuring your campaigns clearly disclose how collected information will be used.

Billing information. When you subscribe to a paid plan, our payment gateway partners (Razorpay and/or Stripe) collect your payment details. We do not store full card numbers, CVVs, or bank credentials on our servers — only a transaction reference and an invoice record.

Usage & technical data. We log basic technical information such as IP address, browser type, pages visited, and timestamps to keep the service secure and improve performance.

3. How we use information

To operate the Service: send automated DMs, manage conversations, show analytics.
To verify your identity and prevent fraud or abuse.
To process payments, send invoices, and handle refunds.
To enforce one-time offers such as the one refund and the one 7-day Pro trial per person: we keep a one-way hash of your email address, the Instagram account IDs you connected and, for card trials outside India, the card fingerprint our payment processor gives us (never the card number).
To send transactional emails (verification, billing receipts, security alerts).
To respond to support requests and improve the product.
To comply with applicable laws and enforce our Terms of Service.

4. Sharing of information

We do not sell your personal information. We share information only with:

Meta Platforms, Inc. — through the official Instagram Graph API, to send and receive Instagram messages on your behalf.
Payment processors (Razorpay, Stripe) — solely to process your payments.
Infrastructure providers (cloud hosting, database, email delivery, error monitoring) — strictly to operate the Service.
Google Analytics (via Firebase) — usage statistics such as pages visited, identified only by an internal account identifier. We do not send your name, email address or Instagram handle.
Law enforcement / regulators — only when required by valid legal process.

5. Data retention

We retain your account information for as long as your account is active. Upon account deletion, your profile, campaign data, and contact data are permanently deleted within 30 days. Billing records are retained for up to 7 years as required by Indian tax law. The email hash, Instagram account IDs and card fingerprint used to limit refunds and trials to one per person are kept after deletion for that purpose only. Instagram access tokens are revoked and deleted immediately upon account disconnection. You can request deletion of your account and personal data at any time by emailing [email protected].

6. Security

We use industry-standard security measures including TLS encryption in transit, secure storage of access tokens with restricted access, role-based access controls, and regular security reviews. No system is 100% secure, however. If we ever detect a security breach affecting your data, we will notify you and the relevant authorities as required by law.

7. Your rights

You have the right to:

Access the personal data we hold about you.
Correct inaccurate information.
Delete your account and associated personal data.
Disconnect any Instagram account at any time from the Accounts page.
Withdraw consent for processing where consent is the legal basis.
Request that we stop processing or contacting you at any time by emailing us at [email protected].

To exercise any of these rights, email [email protected] from your registered email address.

8. Cookies

We use a small number of essential cookies and similar technologies to keep you logged in and to remember your preferences. See our Cookie Policy for details.

9. Children

IGSender is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. International transfers

Our infrastructure providers may store data in regions outside India. By using our Service, you consent to such transfers, which are protected by appropriate safeguards (such as standard contractual clauses).

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or an in-app notice at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the name and contact details of the Grievance Officer are:

Name: Suraj Kumar Saw

Email: [email protected]

Address: 4th Floor, Ashirvad Store, Adityapur Main Road, Opp. Durian Furniture, Jamshedpur, Jharkhand 831013, India

13. Contact us

Questions or requests about this Privacy Policy? Email us at [email protected] or visit our Contact page.