Privacy Policy

Last updated: April 7, 2026

1. Introduction

BlazeReply ("we", "our", "us") is an Instagram DM automation platform operated by Jacinth Solutions Pty Ltd (ABN registered in Australia). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform at blazereply.com.

By using BlazeReply, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you connect your Instagram Business account to BlazeReply, we collect:

  • Your Instagram username and account ID
  • Facebook Page information linked to your Instagram account
  • OAuth access tokens (used to interact with Instagram on your behalf)

2.2 Instagram User Data

When users interact with your Instagram posts (comments, story mentions), we collect:

  • Instagram user IDs of people who comment on your posts
  • Instagram usernames of commenters
  • Comment text content
  • Direct message content exchanged between your account and commenters

2.3 Voluntarily Provided Information

During AI-powered conversations, Instagram users may voluntarily provide:

  • Email addresses
  • Phone numbers
  • Other personal details shared in conversation

2.4 Usage Data

We collect analytics data including: number of leads captured, DMs sent, keyword performance, and conversation metrics. This data is aggregated and used to provide you with dashboard analytics.

3. How We Use Your Information

We use the information we collect to:

  • Provide the BlazeReply service — detecting keyword comments and sending automated DMs on your behalf
  • Power AI-driven conversations to collect leads and qualify prospects
  • Display analytics and performance metrics in your dashboard
  • Sync lead data to your connected CRM (such as GoHighLevel), if configured
  • Send follow-up DM sequences you have configured
  • Improve and maintain the platform

4. Data Sharing

We do not sell, rent, or trade personal information to third parties. We share data only in these cases:

  • Meta/Instagram API: We interact with Meta's APIs to send DMs and reply to comments on your behalf. All interactions comply with Meta's Platform Terms.
  • AI Processing: Message content is sent to Anthropic's Claude API for AI conversation generation. Anthropic does not retain conversation data beyond processing the request. See Anthropic's Privacy Policy.
  • CRM Integration: If you connect a CRM (e.g., GoHighLevel), lead data is synced to your CRM account as configured by you.
  • Legal Requirements: We may disclose information if required by law, regulation, or legal process.

5. Data Storage and Security

Your data is stored securely on Supabase (hosted on AWS in the Asia-Pacific region). We implement the following security measures:

  • All data is encrypted in transit (TLS/SSL) and at rest
  • Access tokens are stored securely and never exposed to the client
  • API endpoints are protected by authentication
  • Dashboard access is password-protected

6. Data Retention

We retain your data for as long as your account is active. If you disconnect your Instagram account or request deletion:

  • Your access tokens are immediately revoked
  • Lead data and conversation history can be deleted upon request
  • We will delete all associated data within 30 days of a deletion request

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Disconnect your Instagram account at any time
  • Export your lead data

To exercise any of these rights, contact us at support@blazereply.com.

8. Meta Platform Data

BlazeReply accesses Instagram data through Meta's official APIs. We comply with Meta's Platform Terms and Developer Policies. Specifically:

  • We only access data necessary to provide the service
  • We do not use Instagram data for advertising or sell it to advertisers
  • We do not transfer Instagram data to data brokers
  • We process data only as described in this policy and as authorized by the account owner
  • Users can revoke access at any time through Instagram Settings > Apps and Websites

9. Cookies

BlazeReply uses a single authentication cookie ("ke_auth") to maintain your dashboard session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, contact us at: