Who we are
auto.prmptr is an Instagram conversation automation service operated by prmptr.ai. Questions or privacy requests can be sent to prmptrai@gmail.com.
Information we process
Depending on how the service is configured, we may process:
- Account information, including your email address, user identifier, sign-in provider, verification status, workspace membership, and sign-in timestamps. Supabase handles email/password authentication. If you choose Google sign-in, Google provides basic account information; this does not give us access to your Gmail inbox.
- Instagram account information, including account and user identifiers, usernames, profile information made available by Instagram, permissions, and connection status.
- Conversation and content information, including direct messages, comments, replies, message metadata, timestamps, and related webhook events delivered by Meta, conversation summaries, saved customer context, AI drafts, and generation/review records.
- Service configuration, including automation rules, brand instructions, reply preferences, and connected-service settings.
- Technical information, including request logs, error details, event status, and security signals needed to operate and protect the service.
How we use information
We process information to:
- Create accounts, authenticate users, and keep workspaces separate.
- Receive, organize, and respond to Instagram conversations.
- Run automations requested by the connected business account.
- Generate suggested or automated replies when AI features are enabled.
- Maintain conversation state, prevent duplicate actions, and support human handoff.
- Troubleshoot, secure, monitor, and improve the service.
- Comply with applicable law and enforce our terms.
AI-assisted processing
When an account enables AI features, relevant message content and brand context may be sent to the selected AI service provider to generate a draft, response, or conversation summary. We may retain the input context, output, and review/status records to support conversation continuity and diagnose failures. AI output can be incomplete or incorrect and should be configured and reviewed appropriately by the connected account owner.
prmptr.ai does not sell Instagram conversation data or use it to build a general-purpose advertising profile. We do not train our own general-purpose AI model on Instagram message content.
How information is shared
We share information only as needed to provide and protect the service, including with Meta and Instagram, hosting and database providers such as Vercel and Supabase, Google when you select Google sign-in, Resend when account email delivery is enabled, and the AI provider selected for enabled AI features (currently OpenAI). These providers process information under their own terms and privacy commitments.
We may also disclose information when required by law, to investigate abuse or security incidents, or as part of a business transfer permitted by law. We do not sell personal information.
Cookies and browser storage
We use authentication cookies and related browser storage to keep you signed in, complete sign-in safely, and remember service preferences. Blocking required cookies may prevent sign-in or other account features from working. Signing out ends the current app session; it does not delete your account or information already stored by the service.
Connected businesses and Instagram users
A business that connects its Instagram account controls its customer conversations and determines how auto.prmptr is configured. prmptr.ai processes that information to provide the service on the business's behalf. Instagram users may contact the business they messaged or contact us directly about information processed by auto.prmptr.
Retention and deletion
We retain information only for as long as reasonably necessary to provide the service, maintain security and audit records, resolve disputes, and meet legal obligations. Retention may vary by data type and account configuration.
You can request deletion by following our data deletion instructions. After we verify a valid request, we aim to remove covered information from active systems within 30 days. Limited records may be retained when required for legal, fraud-prevention, or security purposes, and backup copies may remain until they are overwritten through normal retention cycles.
Security
We use reasonable administrative and technical safeguards designed to protect information, including access controls, secret management, encrypted connections, and webhook signature verification. No system can guarantee absolute security.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal information. You can disconnect the app through Meta or Instagram settings to stop future access, and you can email prmptrai@gmail.com to make a request. We may need to verify your identity and authority over the relevant account.
International processing
Service providers may process information in the United States and other countries. The location depends on the provider and service configuration. Contact us for information about the providers and processing locations relevant to your account.
Children
auto.prmptr is a business service and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13.
Changes and contact
We may update this policy as the service changes. The date at the top will show the latest revision. Contact prmptr.ai at prmptrai@gmail.com with questions or requests.