Last updated November 9, 2026
Privacy Policy
This notice covers the OpenReply installation used to respond to comments and messages on connected Instagram accounts.
Who is responsible
Melodywand operates this installation and is responsible for its use of personal data. Contact ai@melodywand.com.
Information we handle
We receive account IDs, usernames, comments, messages, button interactions and related timestamps from Instagram via Meta. If a campaign checks whether you follow the account, we request the follow status that Meta makes available for the conversation. We keep records of automated replies and errors. Campaign links may record a click time, browser details, referrer and a hashed IP address. For administrators we also process sign-in email addresses, session data, settings and encrypted Meta tokens.
Why we use it
We use Instagram data to respond to the comment or interaction, check campaign eligibility, prevent duplicate replies, measure use of campaign links and resolve delivery problems. Where EU data protection law applies, our legitimate interests are responding to requests, operating and securing the service, and diagnosing and measuring its use. We use administrator sign-in data to provide and secure access. A follow check can decide whether a campaign link is sent. Meta may require you to interact in the Instagram conversation before it provides that status.
Who receives it
Meta delivers the interactions and processes the replies under its own terms. Authorized operators can access the records needed to administer the service. The infrastructure and email providers used by this installation are One.com.
Retention and your rights
We retain campaign and delivery records while needed to run the campaign, avoid duplicate replies, investigate failures and handle requests. Residual copies may remain in backups until rotation or be retained where required by law. You can request access, correction or deletion, or ask us to restrict processing. You can object to processing based on legitimate interests, request a portable copy where applicable, and complain to your data protection authority. See how to request deletion.