EngageFlow AI

Legal

Privacy Policy

This policy explains what data EngageFlow AI collects, why we collect it, and the choices you have. We built EngageFlow for Instagram-first businesses in India, and we take your data — and your customers' data — seriously.

Last updated: 8 July 2026

1. Who we are

EngageFlow AI (“EngageFlow”, “we”, “us”, or “our”), operated by Asif Khan, India, provides an AI-powered platform that helps businesses automate Instagram comment replies and direct messages, moderate spam, capture leads, and sell digital products through a hosted storefront. This Privacy Policy applies to our website, dashboard, public storefront pages, and related services (collectively, the “Service”).

2. Information we collect

2.1 Information you provide

  • Account details — name, email address, phone number, and business name when you sign up.
  • Sign-in with Google — if you sign in with Google, we receive your name, email address, and Google account identifier from Google to create or link your account.
  • Billing details — handled by our payment processor (Razorpay); we store only the plan, status, and transaction references, not your full card details.
  • Support communications — messages you send us by email, chat, or other channels.

2.2 Instagram & Meta data

When you connect an Instagram Professional account through Meta, you authorise us — via the permissions you grant on Meta's consent screen — to receive the following data from the Instagram API (“Platform Data”):

  • Your account profile (instagram_business_basic) — your Instagram username and account ID, used to link the account to your EngageFlow dashboard and send replies on your behalf.
  • Comments on your posts and reels (instagram_business_manage_comments) — the comment text and the commenter's username and ID. We use these to classify each comment with AI, publish automated replies you configure, and remove spam or abusive comments from your posts on your behalf.
  • Direct messages sent to your account (instagram_business_manage_messages) — the message text and sender ID, used to send automated replies within Meta's messaging window after someone messages you first.
  • Engagement records — short excerpts of comments/messages and commenter usernames are retained in your dashboard analytics (for example, your captured-leads list and moderation log) until you disconnect the account or ask us to delete them.

We access this data through Meta's official APIs and only with the permissions you grant. Our collection, use, and transfer of information received from the Meta and Instagram APIs adhere to the Meta Platform Terms and Developer Policies, and we use this Platform Data only to provide the features you enable — never to sell it, to build advertising or user profiles, or to transfer it to data brokers. You can revoke access at any time by disconnecting the account in your EngageFlow dashboard, or from your Instagram app under Settings & privacy → Apps and websites.

2.3 Information collected automatically

  • Technical data such as your IP address and the time of your requests, seen by our servers and used for security and rate-limiting.
  • Usage data such as which features you use in the dashboard and when.
  • Cookies and similar technologies — such as browser local storage, which we use to keep you signed in and to remember preferences like your theme.

2.4 Storefront customers

If you buy a digital product from a creator's EngageFlow storefront, we collect your name and email address to process the order through our payment provider (Razorpay), deliver your download link by email, and keep a purchase record for the seller. The seller you bought from can see your name, email, and order details. Payment card details are handled by Razorpay and never stored by us. You can ask us to delete your order data at any time (see Section 6), subject to records we must keep for tax and accounting law.

3. How we use your information

  • To operate, maintain, and provide the Service, including generating AI replies and moderating comments.
  • To process payments and manage your subscription.
  • To send you transactional messages, product updates, and (with your consent) marketing.
  • To provide support and respond to your requests.
  • To detect, prevent, and address fraud, abuse, and security issues.
  • To comply with legal obligations.

4. AI processing

EngageFlow uses a third-party large language model (Google Gemini) to classify comments and generate replies. Only the relevant comment or message text (plus the reply settings you configure, such as your brand voice) is sent to this provider, solely to produce a response for your account. We do not sell this content or use it to train our own models; our AI provider processes it only to generate your response, under its API terms. Replies sent by your automations are automated experiences; where applicable law requires it, you are responsible for disclosing to your audience that they are interacting with automation (see our Terms).

5. How we share information

We do not sell your personal data. We share it only with:

  • Service providers — partners who process data on our behalf, only on our instructions and under contract: Razorpay (payment processing), Google Gemini API (AI classification and reply generation), SendGrid (transactional email), and our cloud hosting and database providers.
  • Meta — as required to operate the Instagram integration you enabled.
  • Legal and safety — when required by law or to protect rights, safety, and the integrity of the Service.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

6. Data retention & deletion

We retain your information for as long as your account is active and as needed to provide the Service. When your account is deleted at your request, we delete or anonymise your personal data within 30 days, except where we must retain limited records to meet legal, tax, or accounting obligations.

Meta Platform Data. If you disconnect your Instagram account from EngageFlow — or revoke our access from your Instagram settings — we stop accessing your Instagram data and immediately delete the stored connection (including access tokens) and remove Instagram-derived content (commenter usernames and comment/message text) from your analytics.

How to delete your data. You can remove your data at any time, free of charge:

  • Disconnect in the dashboard — under Settings → Instagram, click “Disconnect”. This deletes that account's Instagram/Meta Platform Data as described above.
  • Revoke from Instagram — remove EngageFlow AI in your Instagram app under Settings & privacy → Apps and websites. Meta notifies us and we automatically delete that account's Platform Data. If Meta sends us a formal data-deletion request on your behalf, we also return a confirmation code and a status page showing the outcome.
  • Email us — to delete your EngageFlow account and all personal data associated with it (or any other data, including storefront order details), email support@engageflow.ai from your account's email address with the subject “Data deletion request”. We will confirm and complete the deletion within 30 days.

7. Your rights

Depending on your location and applicable law (including India's Digital Personal Data Protection Act, 2023), you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. To exercise these rights, contact us at support@engageflow.ai.

8. Security

We use industry-standard administrative and technical safeguards — encryption in transit (HTTPS), access controls, and regular reviews — to protect your data. Instagram access tokens are additionally encrypted at rest (AES-256-GCM). No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children's privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the “Last updated” date above. Material changes will be communicated through the Service or by email.

11. Contact us

EngageFlow AI is operated by Asif Khan, India. Questions about this policy or your data? Email us at support@engageflow.ai.