Privacy Policy
Effective date: March 1, 2026 · Last updated: March 1, 2026
1. Who We Are
SendMeLink ("we", "our", or "us") operates the website sendmelink.in and the SendMeLink SaaS platform. We are based in India. If you have any questions about this policy, email us at support@sendmelink.in.
2. Information We Collect
Account Information
When you sign up, we collect your name, email address, and a hashed password. If you sign in with Google, we receive your name, email, and profile picture from Google.
Instagram Account Data
When you connect your Instagram account, we store your Instagram user ID, username, display name, and an access token that allows us to monitor comments and send DMs on your behalf. We do not store your Instagram password.
Automation Data
We store the Reel URLs, trigger keywords, and DM message templates you configure, along with automation activity logs (commenter username, DM status, timestamp).
Usage Data
We collect standard server logs including IP addresses, browser type, and pages visited. This data is used solely for security and performance monitoring.
3. How We Use Your Information
- To provide, operate, and improve the SendMeLink service
- To authenticate you and keep your account secure
- To process Instagram comment events and send automated DMs on your behalf
- To display analytics about your automation performance
- To respond to your support requests
- To comply with legal obligations
We do not sell your personal data to third parties. We do not use your data for advertising purposes.
4. Third-Party Services
We use the following third-party services to operate SendMeLink:
- Meta / Instagram API — to receive comment notifications and send DMs via your connected Instagram account, subject to Meta's Privacy Policy.
- Google OAuth — for sign-in with Google, subject to Google's Privacy Policy.
- Neon (database) — our PostgreSQL database provider, hosted on AWS infrastructure.
- Vercel — our hosting provider for the web application.
5. Data Retention
We retain your account data for as long as your account is active. Automation activity logs are retained for 90 days. If you delete your account, all associated data is permanently deleted within 30 days.
6. Your Rights
Under India's Digital Personal Data Protection Act (DPDPA) 2023 and applicable law, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data
- Withdraw consent for data processing
- Nominate a person to exercise rights on your behalf
To exercise any of these rights, email us at support@sendmelink.in. We will respond within 30 days.
7. Instagram Data Deletion
If you disconnect SendMeLink from your Instagram account via Instagram's app settings, we will receive a deletion request from Meta and permanently delete all data associated with your Instagram account from our systems within 30 days. You may also email us directly at support@sendmelink.in to request immediate deletion.
8. Cookies
We use essential cookies only — for authentication sessions and CSRF protection. We do not use tracking or advertising cookies.
9. Security
All data is transmitted over HTTPS. Passwords are hashed using bcrypt and never stored in plaintext. We follow industry-standard security practices to protect your data against unauthorised access.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice on the platform. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact Us
For any privacy-related questions or requests, contact us at:
support@sendmelink.in