Replino Privacy Policy

1. Who we are

Replino is run by the Replino team, which is responsible for the data described on this page.

• Email: info@replino.ir

2. Data we collect from you

• Mobile number. It is your username, and sign-in codes are texted to it.
• Name. You give it when you sign up.
• Password, if you set one. We never keep the password itself, only a hash that cannot be turned back into it.
• Sign-in codes. Only a hash, and only for two minutes.
• Payment tracking codes. Payment is by bank transfer, and we keep the tracking code you enter so we can confirm it. We do not collect your card or bank account details.
• Subscription records. The plan, amount, payment status and the days on each page.
• The replies you build. Their keywords, texts and content.

3. Data we receive from Meta and Instagram

You connect an Instagram professional account through Meta's official login (Facebook Login for Business and the Instagram API). We never see your Instagram password. Once you grant access, we receive:

• Account details: the Instagram account ID, username and name.
• An access token. The key Meta issues so we can reply on the page's behalf. It is stored encrypted.
• Incoming direct messages and comments: the sender's ID, the text, and the message or comment ID.
• The page's list of posts, so you can set a comment reply for chosen posts.
• The replies Replino sends, and whether each one was delivered.

4. How we use the data

For three things only:

• To send the auto-replies you built. To do this, the text of a message or comment is compared with your keywords.
• To show you your pages and posts in the app.
• To run your account and subscription: sign-in, payments and days left.

We do not:

• show ads or use data for advertising,
• sell or rent data,
• build profiles of people,
• use data to train AI models.

5. Who receives the data

• Meta (Instagram). To send a reply, its text and the recipient's ID go to Meta.
• Our SMS provider. Your mobile number and sign-in code, only to send that text message.
• Our hosting provider. Data is kept on servers we rent.

We give data to no one else, unless a valid legal order requires it.

6. Where and how we keep it

• Our servers are in Germany.
• Instagram access tokens are stored encrypted, with the key kept outside the database.
• Passwords and sign-in codes are stored only as hashes.
• All traffic to the site, the app and the server uses HTTPS.

7. How long we keep it

• Incoming messages and comments, and the record of replies sent: deleted one year after they arrive.
• Access tokens: while the page is connected. Disconnecting a page deletes its token at once.
• Your account, pages and replies: for as long as you have an account. A reply you delete is removed at once.
• After an account deletion request: everything is deleted within 2 days.
• Payment records: 5 years, for accounting and disputes.

8. Your rights

You can ask us to:

• give you a copy of your data,
• correct data that is wrong,
• delete your data.

Email info@replino.ir and include the mobile number of your account. We answer within 7 days. The steps for removing access and deleting everything are on the data deletion page.

9. If you messaged a page that uses Replino

When you send a direct message to such a page, or comment on its posts, we process the following on the page owner's behalf: your Instagram ID, the text of the message or comment, and its ID.

This data is used only to send that page's reply, and is deleted as section 7 says. We do not store your name, photo or follower list.

To have it deleted, send your Instagram username and the page's name to info@replino.ir. We delete your stored messages and comments within 2 days.

10. Cookies and browser storage

This site sets no cookies and has no tracking or analytics. The Replino web app keeps only your sign-in session and your light or dark theme choice in the browser's storage, so you do not have to sign in every time. Signing out clears the session.

11. Children

Replino is for businesses and creators, and is not meant for anyone under 18. We do not knowingly collect data from children under 13. If you believe a child has made an account, tell us and we will delete it.

12. Changes to this policy

If this policy changes, the new version appears here and the date at the top is updated.

13. Contact

Send any privacy question to info@replino.ir.