Privacy Policy

It applies when you (a) send, story-reply, or comment a keyword to our connected Instagram professional account; (b) continue into our Telegram channel via the link we send; or (c) purchase a product through our checkout. It does not cover Instagram, Telegram or any third-party platform themselves — their own policies govern your use of them.

2.1 From Instagram (via Meta Platforms)

• Your Instagram-scoped user ID (an identifier unique to our app) and username/display name.
• The content of the message, story reply or comment you send that contains our trigger keyword, plus its timestamp.
• Whether you follow the connected account (a yes/no follow-status check used solely to decide whether to ask you to follow before sending the resource).

We do not collect your Instagram password, your private message history with other accounts, your followers/following lists, or media you did not send to us.

2.2 From Telegram (only if you continue there)

• Telegram user ID and username, and the messages you send to our bot.
• A tracking identifier we generate to link your Instagram interaction to your Telegram session (no third-party advertising cookies are used).

2.3 From a purchase (only if you buy)

• Name, email address, phone number, product, amount and order metadata, received from our checkout provider (Tilda).

2.4 Technical

• Service logs and timestamps needed to operate, secure and debug the Service.

• To deliver what you asked for — sending the resource link after you send the keyword. Legal basis: performance of your request / consent, given by you initiating contact with the keyword.
• Limited follow-up — at most two reminder messages if you have not engaged; stops automatically when you do. Legal basis: legitimate interest in completing the interaction you started; you may opt out anytime (Section 7).
• Order fulfilment & records — processing and recording purchases. Legal basis: performance of a contract and legal/accounting obligations.
• Support — answering questions you send us, including AI-assisted drafting (Section 5).
• Security & analytics — aggregate funnel metrics and abuse prevention. Legal basis: legitimate interest.

We do not use your data for third-party advertising, we do not sell your data, and we do not perform automated decision-making with legal effects on you.

Data obtained through the Instagram Graph API is used only to provide the features described above, in compliance with the Meta Platform Terms and Developer Policies. We request the minimum permissions necessary (instagram_business_basic, instagram_business_manage_messages, instagram_business_manage_comments) and use them solely to receive your keyword interaction and reply to you in Direct.

We share data only with vendors that process it on our behalf under contract:

• Meta Platforms Ireland/US — Instagram messaging delivery.
• Telegram — message delivery in our Telegram channel/bot.
• Tilda — checkout and order webhooks (purchase data).
• Anthropic (Claude) — AI-assisted drafting of support replies; the content of your support message may be processed to generate a reply. Not used to train third-party models.
• OpenAI (Whisper) — transcription of voice messages you send to support, if any.
• Railway — cloud hosting/infrastructure (EU/US).

We may also disclose data if required by law or to protect our rights.

We are established in the Sharjah Publishing City Free Zone, United Arab Emirates. Our processors may store and process data in the EU and the US. Where required, transfers rely on appropriate safeguards (e.g. standard contractual clauses or equivalent).

• Reply STOP (or “стоп”) in the conversation, or simply stop replying — the follow-up sequence ends.
• Remove our app from Instagram (Settings → Apps and Websites) — this also triggers deletion of your data (Section 9).
• Block the account or mute it at any time.

Subject to applicable law, you may request access, correction, deletion, restriction of, or objection to processing of your personal data, and withdraw consent at any time. To exercise any right, email hello@vladimirnikandrov.com or use our Data Deletion page. We respond within 30 days.

You can have your data erased at any time — see the Data Deletion page. Removing our app in Instagram automatically signals us (via Meta’s deauthorize / data-deletion callbacks) to erase the bot profile and interaction history tied to your Instagram-scoped ID.

We keep interaction data only while it is needed for the funnel and analytics, and delete or anonymise it on request. Purchase records may be retained in anonymised form for the period required by UAE bookkeeping and tax law, with no personal contact data attached.

Data is transmitted over TLS, access is restricted, secrets are stored encrypted at rest, and webhook callbacks are cryptographically verified (HMAC-SHA256). No method of transmission or storage is 100% secure, but we take reasonable measures appropriate to the data.

The Service is not directed to, and we do not knowingly collect data from, anyone under 16. If you believe a minor has provided us data, contact us and we will delete it.

We may update this policy; we will revise the “Last updated” date and, for material changes, take reasonable steps to inform you. Continued use after an update constitutes acceptance.

Studio 1804 FZE LLC — hello@vladimirnikandrov.com
Business Center, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates