Legal
Privacy Policy
prtner is an AI assistant that helps small businesses manage their social media — copywriting, comment moderation, and direct-message replies on Instagram accounts they own or manage. This policy explains what data we process, why, and the choices you have.
prtner ("prtner", "we", "us") is operated by Limited Liability Partnership DNF (DNF Marketing), Almaty, Kazakhstan. For any privacy question or request, contact [email protected].
1. Who this policy is for
It covers two groups:
- Clients — businesses that connect an Instagram professional (Business or Creator) account to prtner.
- End users — people who comment on, or send messages to, a connected account. We process the content you send to a connected account only to help its owner respond to you.
2. Data we process
| Category | Examples | Source |
|---|---|---|
| Account profile | Instagram username, account ID, account type, follower & media counts | Meta (Instagram Graph API) |
| Content | Captions, comments, and direct messages on the connected account | Meta (Instagram Graph API / webhooks) |
| Access tokens | OAuth tokens that authorize prtner to act on the connected account | Meta, during connection |
| Operator identifiers | Telegram user, group, and topic IDs used for the human-approval interface | Telegram |
| Usage metadata | AI model, token counts, and cost estimates per request | Generated by prtner |
We do not sell personal data, and we do not use it to build advertising profiles or train third-party foundation models.
3. How we use it
- Read recent comments and messages on a connected account.
- Generate draft replies in the brand's voice using AI.
- Present every draft to the client's team for review — nothing is published without a human approval ("human in the loop").
- Post approved replies back to Instagram through official Meta APIs.
- Measure AI usage for cost and reliability.
4. Service providers (sub-processors)
We share the minimum data needed with infrastructure and AI providers that process it on our behalf under their own terms:
| Provider | Purpose |
|---|---|
| Meta Platforms | Instagram Graph API — read/publish content on connected accounts |
| Google Cloud (Vertex AI / Gemini) | Primary AI model for drafting replies |
| OpenRouter | Fallback AI model provider |
| Supabase (PostgreSQL) | Encrypted application database |
| Telegram | Operator interface for reviewing and approving drafts |
| Hetzner | Server hosting (EU) |
5. Storage & security
- Access tokens are encrypted at rest (PostgreSQL pgcrypto).
- All database access uses parameterized queries; secrets live in protected environment configuration, never in logs.
- Traffic is served over HTTPS/TLS.
6. Retention
- Access tokens — kept until you disconnect the account or revoke access, then deleted.
- Comments & messages — retained only as long as needed to draft and send a response, plus a short operational window; lead records follow a configurable retention period (default 365 days).
- Usage metadata — retained for accounting and reliability.
7. Deleting your data
You can have your data removed at any time:
- Disconnect the Instagram account, or revoke prtner in Instagram → Settings → Apps and websites. This invalidates and removes the stored token.
- Email a deletion request to [email protected] with the account username. We will delete the associated personal data within 30 days and confirm by email.
8. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may withdraw consent by disconnecting the account. Contact [email protected].
9. Children
prtner is a business tool and is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect their data.
10. Changes
We may update this policy; material changes will be reflected by the "Last updated" date above and, where appropriate, communicated to connected clients.
11. Contact
Limited Liability Partnership DNF (DNF Marketing) · Almaty, Kazakhstan · [email protected]
Data Deletion · Удаление данных
Data Deletion Instructions
You can have your data deleted at any time. No login is required — an email request is enough. Choose whichever applies to you:
- Clients (you connected an Instagram account): disconnect or revoke prtner in Instagram → Settings → Apps and websites. This immediately invalidates and removes your stored access token. To also erase associated records (drafts, logs, lead data), email [email protected] from the account's contact address with the Instagram username. We delete the data within 30 days and confirm by email.
- End users (you commented on or messaged a connected account): email [email protected] referencing the account and your username/handle. We remove your content from prtner and confirm.
Инструкция по удалению данных
Ты можешь удалить свои данные в любой момент. Вход не требуется — достаточно письма. Выбери подходящий вариант:
- Клиенты (подключили Instagram-аккаунт): отключите или отзовите доступ prtner в Instagram → «Настройки → Приложения и сайты». Это сразу аннулирует и удаляет сохранённый токен доступа. Чтобы стереть и связанные записи (черновики, логи, данные лидов), напишите на [email protected] с контактного адреса аккаунта, указав Instagram-логин. Мы удалим данные в течение 30 дней и подтвердим письмом.
- Конечные пользователи (комментировали или писали подключённому аккаунту): напишите на [email protected], указав аккаунт и свой ник/handle. Мы удалим ваш контент из prtner и подтвердим.