Privacy Policy

This Privacy Policy explains how Send Link To Me ("we", "us", or "our") collects, uses, stores and protects information when you use Send Link To Me at https://sendlinkto.me, including the website dashboard, the Android app, the Shopify App, and the referral partner dashboard at earn.sendlinkto.me.

Send Link To Me is a self-serve SaaS for Instagram comment-to-DM automation at sendlinkto.me.

Location: Chennai, India. Email: support@sendlinkto.me.

This page is written in plain language for customers, Meta App Review, and Shopify App Store review. It is a product policy summary, not legal advice.

Account information: email, optional name and phone, OTP verification codes (short-lived), and session cookies (or, in the Android app, a session token) used to keep you signed in.

Sign in records: for each sign in, the time, the method (email code or Google), whether it was the website, the Android app or the Shopify dashboard, the device (browser and system, or the phone model and Android version the app reports), the IP address and its approximate location (city, region and country), and when that sign in was last used. You can see them in Settings and sign any of them out. We email you about each new sign in so you can spot one that was not you.

Android app notifications: if you allow notifications, a push token for your phone with the app version, language and time zone, so we can send the kinds you keep on in Settings (new DMs, leads, posts going live, account alerts, tips and ideas, and occasional announcements) and record when you open one.

Android app diagnostics and usage: crash reports (the error, phone model, Android and app versions) and app usage events (screens viewed and steps such as signing in, connecting Instagram, creating an automation or buying a plan) with an app instance identifier, so we can fix problems and improve the app. The advertising ID is turned off, and this data is never used for advertising.

Instagram account information: the Instagram Professional account you connect, including Instagram user id, username, display name, profile picture URL, OAuth scopes, and webhook subscription status.

Instagram Platform Data from Meta: encrypted long-lived access tokens, media ids and captions needed to attach automations, and other fields Meta returns for the permissions you approve. See the Meta usage policy at https://sendlinkto.me/meta-policy.

Comments and messages required for automation: comment id, media id, comment text, commenter Instagram-scoped id (IGSID), commenter username, and delivery outcomes (private-reply or DM message ids, errors, skip reasons). Optional lead fields you collect in chat (name, email, phone) are stored with that contact.

Inbox messages, on paid plans: direct messages sent and received on the connected Instagram account (text, photos, video, audio, files, shared posts, story replies, reactions, edits, unsends, Seen receipts, and ad or link referrals), message ids and times, and whether a message came from an automation, the inbox, or the Instagram app. We also import up to the last 20 messages of each existing conversation when the inbox is first opened. Media is copied to our object storage because Meta media links expire.

Text of inbox voice notes, kept with your inbox messages.

Inbox contact details, on paid plans: the other person's Instagram-scoped id, username, name, profile picture, and the public profile fields Meta returns (follower count, verified badge, whether they follow you), refreshed at most weekly. Tags, private notes, saved replies, and segments you create are stored with your account.

DM automations: when someone sends you a DM, we read its text, any post or Reel they shared, and any quick reply or menu tap, to match your DM keyword automations. Short DMs that match none of them are grouped into a missed demand report (the phrase, a short sample, and counts), kept 90 days after last seen. Ice Breakers and the menu you set are sent to Instagram so they show in your chats.

Automation configuration: automations, keyword rules, DM templates (text, links, captions), and uploaded media files (images, video, PDF) stored for templates you configure.

AI check decisions with a short excerpt (kept 30 days).

Reports on Coach replies: when you report a reply in Coach, the reason you pick, your optional note and the text of that reply, so the team can review it.

Coach, if you turn it on for an Instagram account: reels Coach watches and photo or carousel posts it looks at (videos deleted after analysis), videos, images and YouTube links you attach (attached files deleted within a day), text notes about them, your Coach profile, voice rules, chats, saved items, weekly reports, onboarding answers, and daily follower, like and comment counts for that account. In the Shopify app, product titles, prices and pages Coach looks up in your store.

Saved reels: when you share a reel, post or carousel with our Instagram save account by direct message, or send it a link to one, we save a copy of that post's photos and videos, its caption, its link and the username of who posted it, with the Instagram account you shared it from (its Instagram-scoped id and username) and when. Photos and videos you send the save account directly are saved the same way. Each is saved to the connected Instagram account your sharing account is linked to, so you can see it and use it in Coach. To link an account that is not connected to Send Link To Me, you send the save account a code shown in your dashboard. What an account shares before it is linked is kept, with its Instagram-scoped id, for up to a day so it can be saved once you link, then deleted.

Trending page: the niche, language and topics you pick for each Instagram account, and when you last opened the page with it.

Assistant access: if you create an access key, we store a hash of it and the last four characters, not the full key. If an assistant signs in, we store that OAuth client and grant (client name and permissions) until you disconnect it from AI assistants. We do not store the assistant's chat.

Assistant results: the tool response is returned to the assistant you connected. A read can include the plan, Instagram account, automation, template, post, contact, or analytics fields that tool returns. The access key is not included.

Assistant activity: each tool call stores the time, assistant name, tool name, result, duration, and a short summary. We do not store captions, keywords, phone numbers, or the access key in that log. Rows are deleted after 90 days.

Usage and analytics information: dashboard delivery logs and counts of successful final DMs used to show performance and enforce plan limits.

Website traffic information: page path, referrer, campaign tags (UTM), browser user agent, IP address, and approximate location (country, region, city, network) collected when you visit marketing pages, docs, or login. A first-party visitor cookie (sltm_vid) helps us recognize returning browsers. Staff use this log to understand new traffic. It is not shown in the customer dashboard.

Advertising pixels: the marketing site loads Google Ads and the Meta Pixel so we can measure ads. Those companies receive data according to their own policies.

Technical and log information: request metadata needed to run and secure the service, including rate limiting keys and session IP on login.

Shopify shop information, if you install the Admin app: shop domain, shop id, shop name, and an encrypted Shopify offline access token.

Shopify catalog data used to build DMs: products, collections, images, prices, and handles you select.

Unique offer codes we create on your shop when you turn offers on.

Attributed order identifiers, totals, and discount codes when a shop link or offer code from Send Link To Me matches an order.

Lead email, name, and phone when you turn those asks on. We also write those fields to a tagged Shopify customer and a Send Link To Me segment on that shop.

Billing information, if you subscribe on the website: plan selection, billing currency, subscription status, Razorpay customer and subscription identifiers, and payment event metadata needed to enforce entitlements. We do not store full card or UPI credentials.

Billing information, if you subscribe through the Shopify App: Shopify plan handle, subscription status, and period dates from Shopify App Pricing. Shopify collects payment. We do not store card numbers.

Billing information, if you subscribe in the Android app: the Google Play purchase token, product and plan, order id, status and renewal dates. Google Play collects payment. We do not store card numbers.

Referral partner information, if you join the referral program: email, optional name and phone, your referral code, the commissions and payouts on your account, and the accounts that signed up through your link (shown to you with masked emails).

Referral payout details: your country of tax residence and payout method; your UPI ID, or bank account number and IFSC, or PayPal email; the name on that account; your PAN if you are a tax resident of India, or an optional tax ID from your own country; a postal address for PayPal payouts; and when you last confirmed and changed these details.

Customers connect their own Instagram Professional accounts and configure automations. We process Instagram Platform Data only as necessary to provide the requested automation functionality and, if you turn on Coach, to learn your content style and write drafts for you.

Examples include: detecting eligible top-level comments via Meta webhooks, matching configured keywords, sending configured private replies and allowed DMs through Meta Graph APIs, optionally posting a short public comment reply, recording delivery and automation status, showing your direct messages in the inbox and sending the replies you write there (paid plans), providing analytics in the customer dashboard, publishing or scheduling content when you use that feature, and enforcing plan limits.

Access tokens are encrypted at rest and used only to call Meta on your behalf.

We do not sell Instagram Platform Data. We do not use Platform Data to build unrelated advertising profiles. We do not scrape Instagram or use unofficial clients.

We do not use Instagram Platform Data to train AI models.

Send Link To Me has two kinds of AI features. AI help (Write, Rewrite, keyword and reply ideas, AI checks and voice note text) runs on infrastructure we operate or instruct, and that text is not sent to outside AI companies.

Coach is an optional AI chat on paid plans. It is off until you turn it on for an Instagram account, after a screen that explains this processing. When it is on, Coach processes: your reels with their sound (up to 10 when it learns your account, then new reels you post while you use Coach, plus any reel you add with @); your photo and carousel posts; the captions and like and comment counts of your recent posts; comments people left on your reels (only their text, without who wrote them); your follower count; your automations, their keywords and what they brought in (DMs sent, link clicks, leads and orders); your answers to Coach's questions; the videos (up to 1 GB), images and YouTube links you attach, and scheduled posts you ask it to check; the reels and posts you saved to Saved reels, when you use one in a chat; in the Shopify app, the titles, prices and pages of products it looks up in your store; your Coach profile, voice rules, chats and saved items; and daily follower, like and comment counts for the account. Coach does not read your DMs.

Coach uses AI service providers under written contracts that let them process this data only to provide Coach to you. They do not use it to train their models. To watch a reel, we copy the video to temporary cloud storage, the provider analyses it, and we delete the copy right after; a storage rule removes any copy left behind within one day. Files you attach are kept in that temporary storage for up to a day so Coach can check them, then deleted. Each provider may keep inputs for a limited time to detect abuse, under its terms: up to 30 days, or up to 2 years for inputs its safety systems flag. A provider may also keep inputs and outputs in memory for up to 24 hours to answer repeated requests faster.

Coach processes each creator's data only for that creator. We do not combine creators' data, build benchmarks across creators, or train any model on it. Coach comments on your content, never on you as a person.

Trends: when you send /trends, or ask Coach what is trending, Coach runs a web search for what is trending this week. The search service receives your niche, region and language and a short summary of your Coach profile (your niches, formats, audience and the kinds of things you sell, never names, handles, links or prices), and may keep the search queries for up to 3 days to run its service. Coach's AI service providers read the trends it finds, and what is trending on the Trending page for your niche, language and topics (YouTube videos, web articles and Wikipedia articles), to pick the ones that fit you and use them in your ideas, scripts, captions and checks. Trends are kept in the chat where you asked, for up to two years, and Coach uses your latest search in your other Coach chats for 14 days. Send Link To Me also checks what is trending in each niche every day, with nothing about you, and Coach uses the result for your niche the same way. At most 4 trend searches of your own a day per Instagram account.

Weekly coach: once a week Coach writes a short report for each account you use it with, from your recent posts' likes, comments, DMs sent, link clicks, leads and orders. It shows on Home and in Coach and, if your email digests are on, in the weekly email. Reports are kept for 26 weeks. Best times to post are worked out by Send Link To Me from your account's activity, without an AI provider.

Actions and assistants: Coach can propose to create or change an automation, turn one on or off, or schedule or post something. Nothing happens until you tap Confirm, and each confirmed action is listed in AI assistants activity. If you ask Coach from an AI assistant such as Claude or ChatGPT, your request and Coach's reply pass through that assistant's service under its own privacy policy, and the chat is also saved in Coach. A Trends card is never sent to an assistant; an idea sent to an assistant may name a trend, without its links.

We keep Coach's text notes about your reels, your Coach profile (including follower questions, which are short summaries with names, handles and links removed), voice rules, chats and saved items until you turn Coach off or disconnect the Instagram account, which deletes them. Daily follower, like and comment counts are deleted after 400 days, or sooner if you turn Coach off or disconnect the account. Notes about a reel you delete on Instagram are deleted when Coach next sees it is gone. We keep a record of Coach's AI costs per login, and a one-way code of each Instagram account that has had its free learning, without any of your content, for billing and abuse prevention.

The Trending page uses YouTube API Services to show public YouTube videos, and YouTube's privacy policy at https://www.youtube.com/t/privacy covers what YouTube receives. The page also shows articles from a web search, and Wikipedia's most read articles.

To find them, we send YouTube and the web search only search words: a niche (such as skincare), a country and a language. For lists made for your Instagram account, we also send up to 5 topic words, which you write on the page or which we make from your Coach profile on infrastructure we operate or instruct, never names, handles, links or prices. We never send your name, email, Instagram username or other personal details. Wikipedia receives only a language and a day.

We store each list's results (titles, links, channel names, thumbnail links, short descriptions, dates and view counts) and delete them 7 days after their last refresh. We do not record which videos or articles you open. Thumbnails load in your browser from YouTube's servers.

With Coach on, Coach's AI service providers read the titles, channels, sites, dates and view counts on these lists for your Instagram account to write your ideas, scripts, captions and checks. Coach reading them also builds the lists made for your account, as opening the page does.

We store data on infrastructure we operate or instruct, including application hosting, a managed database, and object storage for media you upload.

Reel videos for Coach are copied to temporary cloud storage only while they are analysed and are deleted right after, with a one-day storage rule as a backstop. Videos and images you attach in Coach stay in that storage for up to a day.

Photos and videos you save to Saved reels are kept in our object storage until you delete them or disconnect the Instagram account they are saved to.

Instagram access tokens are encrypted at rest. Website sessions use cookies, and the Android app keeps its session token in the phone's secure storage. OTP codes are short-lived. The Shopify App uses App Bridge session tokens instead of a website login cookie. The visitor cookie used for traffic logs is httpOnly and lasts up to one year or until pruned from our logs.

We apply access controls, HTTPS in transit, and least-privilege use of tokens so they are used only to call Meta for the automations you configured.

We keep account and product data while your account is active and as needed to provide the service.

Comment and DM delivery logs used for debugging, analytics, and plan metering are retained up to 90 days, then pruned.

Missed demand phrases from DMs that matched no DM automation are deleted 90 days after they were last seen.

Inbox messages, copied media, contact details, tags, and notes (paid plans) are kept while the Instagram account stays connected, so you can read past conversations. Disconnecting the account or a Meta deletion request deletes them. If you move to a plan without the inbox, new messages stop being saved and existing history stays until you disconnect.

Coach notes, profile, voice rules, chats and saved items: until you turn Coach off or disconnect the account. Notes about a reel you delete on Instagram: until Coach sees it is gone.

Coach's daily follower, like and comment counts: up to 400 days, or until you turn Coach off or disconnect the account.

Coach weekly reports: 26 weeks. Trends: only in the chat where you asked, for up to two years, or until you delete that chat, turn Coach off or disconnect the account. Files you attach in Coach: up to a day.

Trending lists: 7 days after their last refresh. Your Trending niche, language and topics: until you disconnect the Instagram account.

Insights, for accounts where Meta has approved them: up to 400 days, or until you disconnect the account.

Saved reels (the saved photos, videos, captions and links, and which Instagram accounts are linked to save to yours): until you delete them, disconnect the Instagram account they are saved to, or your Send Link To Me account is deleted. Turning Coach off does not delete them. Posts shared before an account is linked: up to a day.

Browser sign-in grants for assistants stay until you disconnect them in AI assistants. Assistant activity rows are deleted after 90 days.

Sign in records: until that sign in ends, when you sign out, sign it out from Settings, or after 30 days.

Push tokens: until you sign out on that phone, it is signed out from another device, or the app is uninstalled. The record of each notification sent and opened stays until your account is deleted.

Crash reports: up to 90 days. App usage events: up to 14 months.

Reports on Coach replies: until your account is deleted.

Website page-view logs and unlinked visitor records are retained up to 90 days, then pruned.

If billing pauses after failed payment, product data is retained for 60 days from the pause, then deleted if you do not resume a plan.

Encrypted Instagram tokens are removed when you disconnect an account or when a Meta deletion request completes.

Each referral payout request keeps a copy of the payout details on file at that moment, for our tax and accounting records, even if you change them later.

We do not sell Instagram Platform Data.

We share data with Meta and Instagram only as needed to operate APIs you authorized (OAuth, webhooks, Graph calls).

When you connect an assistant, we send that tool response to the assistant's service so it can answer you. We do not sell that data. What the assistant keeps in the chat is covered by its own privacy policy.

We use processors under our instructions: hosting for the application, email delivery for OTP and support, object storage for media you upload, Razorpay for website payments, Google Play for payments in the Android app, Shopify for Admin API access, App Pricing, and App Bridge, a push notification, crash reporting and app analytics service for the Android app, Slack for internal operational alerts (for example new signups), and, for Coach only, AI service providers, a web search service for trends, temporary cloud storage, and a media service that fetches a public post you share or link with us (Saved reels, or a reel link you paste in Coach) so we can save its photos and videos. Google and Meta receive advertising pixel data on the marketing site as described above.

For the Trending page, YouTube and a web search service receive only the search words described under Trending page.

When you collect lead fields in a Shopify automation, we may create or update a customer on that shop and add them to a Send Link To Me segment.

When we pay a referral partner through PayPal, PayPal receives the payout amount and the partner's PayPal email. UPI and bank payouts in India go through our bank with the details the partner saved.

We may disclose information if required by law or to protect the service and users from abuse.

A dedicated Meta usage policy describes login, the OAuth scopes we request (including insights for accounts where Meta has approved it), webhooks, private replies, publish, and what we do not do with Platform Data.

Read it at https://sendlinkto.me/meta-policy.

Disconnect an Instagram account in the Send Link To Me dashboard. That deletes tokens and cascaded product data for that connection and stops API calls for that account.

You can also revoke app access in Instagram or Meta Apps and Websites settings at any time. Meta may then call our data deletion callback.

Disconnecting Instagram does not cancel your Send Link To Me subscription. On the website, cancel billing from Settings. On the Shopify App, cancel in Shopify Admin or uninstall the app.

You can delete your whole account in Settings on the website or in the Android app, after confirming a code we email you. We then delete your connected Instagram accounts and their data, Coach data, assistant connections, your profile and sign in, and cancel a paid plan. We keep invoices and payment records without your name or email where tax law requires. You can also email us from your registered address to request deletion.

We honor Meta Data Deletion Request Callbacks. Check status on the data deletion page at https://sendlinkto.me/deletion with your confirmation code.

Uninstalling the Shopify app or a Shopify shop-redact request removes that shop's connection. A Shopify-origin login can be deleted when Shopify sends a shop-redact request.

You may request access to the account data we hold, correction of inaccurate account details, or deletion of your account and related product data by emailing us.

You can disconnect Instagram yourself in the dashboard, which deletes that connection's tokens and cascaded data.

You can see where you are signed in and sign any device out, or every device at once, in Settings on the website, the Shopify dashboard or the Android app. You choose which notifications the Android app sends in its Settings, and you can turn them all off in Android settings.

Do not submit sensitive personal data in DM templates unless you have a lawful reason to share it.

Privacy questions: support@sendlinkto.me.

Location: Chennai, India.