Privacy Policy

1. Data We Collect

When you use BriLinkDot, we collect the following information:

• Account data: Name, phone number, email address, Instagram handle
• Instagram data: Access tokens, account ID, post/comment/message data via Meta Graph API
• Usage data: Automation configurations, DM logs, analytics events
• Payment data: Payment is processed by Razorpay. We store only the transaction ID and subscription status — never your card details
• Device data: IP address, browser type, device information for security purposes

2. How We Use Your Data

We use the data we collect to:

• Provide and improve the BriLinkDot platform and automations
• Process payments and manage subscriptions
• Send product updates, billing notifications, and support messages
• Monitor platform security and prevent fraud
• Generate anonymized analytics to improve the platform

We do not sell your personal data to advertisers or third parties.

3. Instagram Data & Meta API

BriLinkDot accesses your Instagram account data via Meta's official Graph API with your explicit permission. We access:

• Your Instagram Business account ID and username
• Comments on your posts (to trigger automations)
• Direct messages (to send automated responses)
• Story replies (if you enable story triggers)

You can revoke BriLinkDot's access to your Instagram account at any time via your Instagram Security Settings. Revoking access will deactivate all automations.

4. Data Storage & Security

Your data is stored on secure, encrypted servers. We use:

• Supabase (PostgreSQL) for structured data — hosted on AWS
• Upstash Redis for session and rate limiting data
• Cloudflare for CDN and DDoS protection

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We follow industry-standard security practices and conduct regular security audits.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account:

• Profile and automation data is deleted within 30 days
• DM logs are deleted within 7 days
• Payment records are retained for 7 years (as required by Indian tax law)

6. Your Rights

You have the right to:

• Access: Request a copy of all data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Export: Download your contacts, automation configs, and analytics data

To exercise these rights, email us at privacy@brilinkdot.com

7. Cookies

We use essential cookies to maintain your login session. We use analytics cookies (from our own infrastructure) to understand how the platform is used. We do not use third-party advertising cookies.

8. Third-Party Services

BriLinkDot integrates with the following third-party services, each with their own privacy policies:

• Meta Graph API — Instagram integration
• Razorpay — Payment processing
• Google — OAuth login (if used)
• Resend — Transactional emails
• Sentry — Error monitoring (anonymized)

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you by email at least 14 days before any material changes take effect. Continued use of the platform after changes constitutes acceptance.

10. Contact

For privacy-related questions or requests:
Email: privacy@brilinkdot.com
General: hello@brilinkdot.com