Privacy Policy

Effective Date: October 28, 2025 • InventoryResponder

InventoryResponder (“we”, “our”, “us”) provides automation tools that help retailers and shop owners manage Instagram customer inquiries by integrating with their inventory systems. Our service uses Meta’s Instagram Graph API to send automated responses based on product availability and pricing data. This Privacy Policy explains what information we collect, how we use it, how we store it, and your rights regarding that information.

Important: By using InventoryResponder, you consent to the collection and processing of your data as described in this policy. This policy complies with Meta’s Data Use Policy and applicable Indian privacy laws.

1. Scope

This policy applies to personal data collected when you connect an Instagram Business or Creator account to InventoryResponder and when you use our services, including any web dashboard, API integrations, or related features.

2. Information We Collect

When you connect your Instagram account to InventoryResponder, we may collect or access the following information via the Instagram Graph API:

Account Information: Instagram User ID, username, profile name, profile picture, and business verification status.
Conversation data: Messages, attachments, message metadata such as sender/recipient IDs, message IDs.
Inventory data: Product inventory content necessary to provide automated responses.
Product data: Product information, pricing, availability status, and stock levels that you choose to integrate with our service.
Technical and log data: API request logs, error reports, performance metrics, and basic telemetry to improve service reliability and functionality.
Configuration data: Your automation rules, response templates, and service preferences.

Data Minimization: We collect only the minimum data necessary to provide our services. We do not collect passwords or login credentials. Authentication and authorization are performed by Meta’s OAuth system.

3. How We Use Your Information

We use the collected information only for the following purposes:

To send automated responses to customer inquiries based on your inventory data and configured rules.
To process and analyze customer messages to provide relevant product information and availability updates.
To store and display conversation history (subject to retention rules below) to enable business workflows and analytics.
To troubleshoot, debug, and improve service performance and reliability.
To comply with Meta’s platform policies, Instagram’s Terms of Service, and applicable Indian laws.

No Commercial Use: We do not sell, trade, or otherwise transfer your personal data to third parties for marketing or advertising purposes.

4. Legal Basis for Processing (if applicable)

Contractual necessity: Processing is necessary to provide the services you request (message sending/receiving).
Legitimate interests: Maintaining and improving service functionality, security, and debugging.

5. Data Retention and Deletion

We retain data only as long as reasonably necessary to provide the service and comply with legal obligations. Our retention policy is:

Short-term logs and caches: Up to 30 days for debugging and performance monitoring.
Conversation history: Retained for up to 90 days unless configured otherwise or requested earlier.
Account configuration data: Retained until account deletion or user request removal.
Inventory integration data: Deleted within 7 days of service termination.
Technical logs: Retained up to 12 months for security and compliance.

Automated Deletion: Data is automatically purged according to the above schedule. You can request immediate deletion at any time (see Contact section).

6. Sharing and Disclosure

To Meta (Instagram/Facebook) as required for message delivery and platform compliance.
To trusted third-party service providers such as cloud hosting and infrastructure providers.
When required by law or court orders.

We do not share or sell data for advertising purposes.

7. International Transfers

We primarily host and process information on servers in India. Some data may be transferred to servers outside India to comply with Meta’s infrastructure requirements. Transfers comply with applicable Indian data protection laws and are limited to what’s necessary for service functionality.

8. Security

We implement administrative, technical, and physical safeguards to protect your data. This includes HTTPS encryption, secure access controls, and secure configuration data storage. However, no system can be 100% secure.

9. Third-Party Services

InventoryResponder relies on third-party providers (for example, cloud hosts and Meta’s APIs). These providers have their own privacy policies and obligations.

10. Children’s Privacy

Our service is not directed at children under 18. We do not knowingly collect data from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

11. Your Rights

Right to Access: Request a copy of your personal data we hold.
Right to Correction: Request correction of inaccurate data.
Right to Deletion: Request deletion of your personal data (subject to legal obligations).
Right to Portability: Request transfer of your data to another service provider.
Right to Object: Object to processing of your data for certain purposes.
Right to Withdraw Consent: Withdraw consent at any time.

12. How to Delete Your Data

To request deletion or disconnect your Instagram account from InventoryResponder, email us at info@galific.com. Include your Instagram username and ID if known.

13. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Notifications will be sent via email or our web dashboard at least 30 days before major updates. Continued use of the service constitutes acceptance of changes.

14. Contact

If you have questions about this policy or data requests, contact:

Rajan Verma

Email: info@galific.com

Business: Galific Solutions
Location: India