Privacy Policy

Last updated: October 30, 2026

This policy explains how Superior DM Flow (“we”) collects, uses and protects data when you use our platform for automating Instagram comments and direct messages, built on Meta’s official API.

1. Data we collect

From your account: name, email and password (encrypted) used to access the dashboard. From the connected Instagram account: ID, username, name, profile picture and an access token (stored encrypted). From people who interact with the connected account: Instagram-scoped ID, username, name, profile picture, comments and messages exchanged with the account.

2. How we use it

Only to run the service the account owner signed up for: receiving comments and messages, replying automatically according to the configured automations, showing the history in the inbox and generating AI replies when enabled. We do not sell data or use it for advertising.

3. Sharing

We use vendors to operate the service: Meta (Instagram API), Supabase (database), Vercel (hosting) and OpenAI (only when AI replies are enabled, sending the conversation text needed to generate a reply).

4. Retention and deletion

We keep data while the account is connected. When you disconnect an Instagram account or remove the app in your Instagram settings, the data linked to it is deleted. See how to request deletion at /exclusao-de-dados.

5. Security

Access tokens are encrypted (AES-256-GCM), database access is isolated per company and all connections use HTTPS.

6. Contact

Privacy questions: beatsbysuperior@gmail.com.