01Who we are
DMflo is an Instagram automation service that helps creators and businesses automate comments, story replies, and direct messages. It is operated by DMFLO LABS (OPC) PRIVATE LIMITED (“DMflo”, “we”, “us”, or “our”), a One Person Company incorporated in India under the Companies Act, 2013, with its registered office in Bangalore, Karnataka.
This Privacy Policy applies to the DMflo mobile app, our website at trydmflo.com, and related services (together, the “Service”). For data-protection purposes, DMFLO LABS (OPC) PRIVATE LIMITED is the data fiduciary / controller of the personal data described below.
The short version: we collect only what we need to run your automations, we never post or message as you without your instruction, and you can ask us to delete your data at any time.
02What we collect
We collect the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Account info | Your name and email address | You, at sign-up |
| Instagram data | Account ID, username, profile basics, and the messages/comments your automations act on — via the Meta API | Meta, with your authorisation |
| Message content | DMs, comments, and story replies processed to detect keywords and send automated responses | Your connected account |
| Usage analytics | Feature usage, automation runs, device/app diagnostics, approximate region | Automatically, as you use the app |
| Payment data | Subscription status and billing reference (card details are handled by our payment processor, not stored by us) | You / payment processor |
We do not collect your Instagram password. Access is granted through Meta’s secure login and can be revoked by you at any time from your Instagram settings.
03Instagram & Meta Platform data
DMflo connects to your Instagram professional (creator or business) account using Meta’s official APIs. When you authorise the connection, Meta grants us limited, permission-scoped access so the Service can function.
- We access only the permissions you approve during connection — typically messaging, comment management, and basic account information.
- We use Meta Platform data solely to provide and improve the features you enable inside DMflo.
- Our use of information received from the Meta APIs adheres to the Meta Platform Terms and Developer Policies, including limitations on use and storage.
- You can disconnect DMflo at any time, which immediately revokes our access to your Meta Platform data.
Plain English: we only touch the Instagram permissions you tick during setup, we use them just to run your automations, and unplugging us cuts off that access instantly.
04How we handle message content
To automate replies, DMflo processes the text of incoming comments, story replies, and direct messages on your connected account. This processing is what lets us detect keywords (including Hinglish and English) and send the response you configured.
- Message content is processed to match your keyword rules and deliver your automated responses — nothing else.
- We do not sell message content, and we do not use it for advertising.
- We retain only what is necessary to operate your automations and show you your conversation history inside the app (see Retention).
- We do not read or process messages on accounts you have not connected.
05How we use your data
We use the data above to:
- Provide the Service — run your automations, deliver replies, and capture leads you opt into capturing.
- Create and secure your account, and authenticate you.
- Process subscriptions and send service-related communications (e.g. receipts, important notices).
- Understand usage and improve reliability, performance, and features.
- Detect, prevent, and address abuse, fraud, or violations of our Terms.
- Comply with legal obligations.
06Legal basis for processing
Where the law requires a legal basis, we rely on: your consent (which you give when connecting your account and which you can withdraw); the performance of a contract with you (to provide the Service you signed up for); our legitimate interests in operating and securing the Service; and compliance with legal obligations.
08Data retention & deletion
We keep personal data only as long as needed to provide the Service and for legitimate or legal purposes. When you delete your account or disconnect Instagram, we delete or de-identify your associated personal data and message content within 30 days, except where we must retain limited records to comply with law (e.g. tax/accounting).
Want your data gone? Email support@trydmflo.com with the subject “Delete my data” and we’ll action it within 30 days.
09How we protect it
We use industry-standard safeguards — encryption in transit, access controls, and least-privilege practices — to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information and to notify you and the relevant authority of any breach as required by law.
10Your rights
Subject to applicable law (including India’s Digital Personal Data Protection Act, 2023), you have the right to:
- Access the personal data we hold about you and request a summary of processing.
- Correct inaccurate or incomplete data.
- Erase your data (“right to be forgotten”), subject to legal exceptions.
- Withdraw consent at any time by disconnecting your account.
- Nominate another individual to exercise your rights in the event of death or incapacity.
- Grieve: raise a complaint with us, and escalate to the Data Protection Board of India if unresolved.
To exercise any of these, contact support@trydmflo.com. We respond within the timelines required by law.
11Children
DMflo is not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a minor has provided us data, contact us and we will delete it.
12Changes to this policy
We may update this policy as the Service evolves or the law changes. We’ll revise the “Last updated” date above and, for material changes, notify you in-app or by email. Continuing to use DMflo after an update means you accept the revised policy.
13Contact & Grievance Officer
For any privacy question, request, or complaint, reach our Grievance Officer:
- Email: support@trydmflo.com
- Data fiduciary: DMFLO LABS (OPC) PRIVATE LIMITED (CIN: U62011KA2026OPC225379)
- Registered office: Aspire Coworks, No. 472/7, Balaji Arcade, 2nd & 3rd Floor, Koramangala VI Block, Bangalore South, Bangalore – 560095, Karnataka, India
See also our Terms & Conditions and Copyright Policy.