Privacy Policy

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the features you use.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we collect any information from third parties? We may receive limited profile information from Google (when you sign in with Google) and from Instagram/Meta (when you connect your Instagram account). We do not purchase data from data brokers.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, prevent fraud, and comply with law. We process your information only when we have a valid legal reason to do so.

In what situations and with which parties do we share personal information? We share information with payment processors (Cashfree, Creem.io, Dodo Payments) and infrastructure providers (AWS). We do not sell your personal information.

What are your rights? Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, or delete your data.

How do you exercise your rights? Email contact@manyreach.io or use the in-app account deletion feature. We will respond within 30 days.

We process your personal information for the following purposes:

• Account creation and authentication: to create and manage your account, verify your identity via email verification or Google OAuth
• Instagram automation: to run your configured automations (auto-reply to comments, send DMs, respond to story mentions)
• Bio pages and short links: to host your bio page, redirect short links, and provide geo-based click analytics
• Lead capture: to collect and store email addresses from Instagram users who interact with your automations
• Billing and subscriptions: to process payments and manage your subscription
• Communication: to send you email verification, password reset, and service-related notifications
• Service improvement: to monitor usage patterns and improve the platform
• Security: to detect and prevent fraud, abuse, or unauthorized access
• Legal compliance: to comply with applicable laws and regulations

We share your information only in the following situations:

• Payment processors: Cashfree, Creem.io, and Dodo Payments process your payment information
• Infrastructure providers: Amazon Web Services (AWS) hosts our application and stores data in the ap-south-1 (Mumbai) region
• Meta/Instagram: we send DMs and comments on your behalf through the Meta Graph API. Message content is transmitted to Meta for delivery.
• Email delivery: Amazon SES sends transactional emails (verification, password reset) on our behalf
• Legal requirements: we may disclose information if required by law, legal process, or government request

We do not sell, rent, or trade your personal information. We do not share your data with advertisers or data brokers.

We use minimal cookies and local storage for essential functionality only:

• Authentication token: stored in your browser's local storage to keep you signed in
• Session preferences: stored locally to remember your UI preferences

We do not use tracking cookies, analytics cookies, or advertising cookies. We do not use any third-party tracking scripts (Google Analytics, Facebook Pixel, etc.).

We keep your personal information only for as long as your account is active and as necessary for the purposes set out in this Privacy Notice:

• Account data: retained while your account is active. Deleted within 30 days of account deletion.
• Instagram access tokens: revoked immediately when you disconnect your Instagram account or delete your ManyReach account
• Automation data and leads: deleted within 30 days of account deletion
• Bio page analytics: deleted within 30 days of account deletion
• Encrypted database backups: may contain your data for up to 90 days after deletion. These backups are not accessed during normal operations and are rotated out automatically.

We implement appropriate technical and organizational security measures to protect your personal information:

• All data is encrypted in transit (TLS) and at rest
• Passwords are hashed using industry-standard algorithms
• Instagram access tokens are stored encrypted
• Infrastructure runs in a private VPC on AWS with no public access to databases
• JWT-based authentication with secure token handling
• Rate limiting on all API endpoints

No method of electronic storage or transmission is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

We do not knowingly collect data from or market to children under 18 years of age. By using our Services, you represent that you are at least 18 years old. If we learn that we have collected personal information from a user under 18, we will delete that information promptly. If you become aware of any data we may have collected from children under age 18, please contact us at contact@manyreach.io.

Depending on your location, you may have the following rights regarding your personal information:

• Right to access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate personal data
• Right to erasure: request deletion of your personal data
• Right to restrict processing: request that we limit how we use your data
• Right to data portability: request your data in a structured, machine-readable format
• Right to withdraw consent: where we rely on your consent, you may withdraw it at any time

To exercise any of these rights, email us at contact@manyreach.io. We will respond within 30 days.

Some browsers include a Do-Not-Track (DNT) signal. Since we do not use tracking cookies or third-party analytics, there is no tracking behavior to change in response to a DNT signal. Your experience on our platform is the same regardless of your DNT setting.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this page. If we make material changes, we may notify you by email or by posting a prominent notice on our website. We encourage you to review this Privacy Notice periodically.

If you have questions or comments about this Privacy Notice, contact:

• ManyReach
• contact@manyreach.io