Legal

Privacy Policy

Last updated: June 6, 2026

Dartzo is a comment-to-DM automation tool for Instagram. This policy explains what we collect, how we use it, who we share it with, and how you can delete it — including the data we access through Meta’s official Instagram APIs.

1. Who we are

Dartzo is operated by Ventahigh Technologies LLP (“Dartzo,” “we,” “us”) — software that automatically replies to comments on your own Instagram content with direct messages. You can reach us at [email protected].

2. Information we collect

Account information

Your name, email address, and profile photo when you sign up (including via Google Sign-In).
Authentication metadata required to keep you signed in.

Instagram & Meta data (only when you connect an account)

Your Instagram professional account profile — username, account ID, and follower count.
Comments on the media you choose to automate, used to detect the keywords you configure.
The direct messages and comment replies we send on your behalf, and their delivery status.
Basic information about people who comment (their Instagram username/ID and message), so we can deliver the DM you configured and show you results.
An access token issued by Meta, stored encrypted at rest, used only to call the APIs on your behalf.

Usage data

Logs, device/browser information, and product analytics used to operate and improve the service.

3. How we use your information

To provide the core service: detect your keyword comments and send the DMs and replies you configured.
To show you honest delivery accounting (sent, queued, expired, failed).
To secure your account, prevent abuse, respect rate limits, and protect your Instagram account.
To provide support, send service emails, and improve the product.

4. Use of Meta Platform data

We access Instagram and Meta data only to provide the comment-to-DM features you enable. We do not sell Meta Platform data, do not use it for advertising, and do not share it except with the infrastructure subprocessors listed below. Our use complies with the Meta Platform Terms and Developer Policies.

5. Who we share data with

We don’t sell your data. We use a small set of trusted subprocessors to run the service:

Supabase — database, authentication, and storage.
DigitalOcean — application hosting.
ZeptoMail (Zoho) — transactional email delivery.
Upstash / managed Redis — the delivery queue.
Razorpay — payment processing (only if you subscribe to a paid plan).
PostHog — product analytics.

We may also disclose data if required by law or to protect our rights and users.

6. Data retention

Account data is kept while your account is active.
Connected-account access tokens are kept until you disconnect the account or delete your account, after which they are removed.
Comment and DM delivery records are retained for up to 12 months for accounting and support, then deleted.
Raw webhook payloads received from Instagram — the technical logs we use to diagnose delivery problems — are deleted after 90 days. A daily job enforces both of these windows automatically.
When you delete your account or remove the app from Instagram, we delete the associated data as described in our Data Deletion policy.

7. Your rights & choices

Disconnect any connected account at any time from Connections in the app.
Access, correct, export, or delete your data — see Data Deletion or email [email protected].
Removing Dartzo from your Instagram settings revokes our access and triggers token deletion.

8. Security

Access tokens are encrypted at rest, data is isolated per user with row-level security, and access is restricted and transmitted over TLS. No system is perfectly secure, but we work to protect your data.

9. Children

Dartzo is not directed to anyone under 18, and we do not knowingly collect their data.

10. International transfers

Your data may be processed in countries other than yours by us and our subprocessors, with appropriate safeguards.

11. Changes

We may update this policy and will revise the date above. Material changes will be communicated in-app or by email.

12. Contact

Questions or requests: [email protected].