Privacy Policy

PostToDM, operated by Dynamic Minds Group, Delhi, India. Last updated: 29 September 2026

PostToDM is a tool that helps a business reply to comments and messages on its own Instagram professional account. This policy explains what data we process and why.

Data we process

• From the connected business account: account ID, username, and an access token issued by Instagram.
• From people who comment on or message that business account: Instagram-scoped user ID, username, name, comment and message text, whether they follow the business account, and timestamps.
• Link clicks: time of click, browser type, and a one-way hash of the IP address.

How we use it

• To reply to comments and send the messages that the person asked for, for example a requested link.
• To show the business owner a list of leads and basic statistics, including export to the owner's Google Sheet.
• To prevent duplicate messages, abuse and errors.

We do not sell personal data, do not use it for advertising, and do not share it with third parties except service providers needed to run the service (hosting, and Google Sheets when the business owner enables export).

Automated messages

Replies sent by PostToDM are automated. A person can stop receiving messages at any time by not replying, or by blocking or restricting the business account on Instagram.

Storage and security

Data is stored on secured servers. Access tokens are encrypted at rest. Access is limited to authorised Dynamic Minds Group staff.

Retention

Lead and message data is kept while the business account remains connected, and deleted within 30 days of disconnection or of a valid deletion request.

Your rights

You can request access to, correction of, or deletion of your data. See Data Deletion or email us. We handle requests in line with applicable law, including India's Digital Personal Data Protection Act, 2023.

Changes

We may update this policy. The date at the top shows the latest version.