Privacy Policy

This Privacy Policy applies to DM Shiyam ("we", "our", or "us"), an Instagram DM automation platform. For any privacy-related queries, contact us at dmshiyamofficial@gmail.com.

Business address: Available upon request.

• Account data: Your name, email address, and password (hashed) when you register.
• Instagram data: Your Instagram account ID, access tokens, and page connections authorised through Meta's OAuth flow.
• Automation data: Keywords, DM templates, and automation rules you configure.
• Activity logs: Records of DMs sent, comments triggered, and webhook events processed.
• Payment data: Subscription status processed via Razorpay. We do not store card details.
• Usage data: IP address, browser type, and pages visited, collected via server logs and cookies.

• To provide and operate the DM Shiyam service.
• To authenticate your identity and secure your account.
• To send automated DMs on Instagram on your behalf, as configured by you.
• To process subscription payments.
• To send transactional emails (e.g. account alerts, password resets).
• To comply with legal obligations.

We retain your data for as long as your account is active. Activity logs (DM history, webhook events) are automatically deleted after 90 days.

You may request full deletion of your account and all associated data at any time by emailing dmshiyamofficial@gmail.com. We will process deletion requests within 30 days.

Upon account deletion, we remove your personal data, Instagram tokens, automations, and activity logs. Anonymised aggregate statistics may be retained for internal analytics.

We use the following types of cookies:

• Strictly necessary cookies: Session cookies required for authentication and security. These cannot be disabled.
• Functional cookies: Cookies that remember your preferences (e.g. dark mode). You may disable these via browser settings.
• Analytics cookies: We may use anonymised usage analytics to improve the platform. No third-party advertising cookies are used.

On your first visit, you will be shown a cookie consent banner. You can withdraw consent at any time by clearing your browser cookies or adjusting browser settings.

• Meta (Instagram/Facebook): We interact with Meta's Graph API on your behalf. Your use is subject to Meta's Privacy Policy.
• Razorpay: Payment processing. Subject to Razorpay's Privacy Policy.
• Google OAuth: If you sign in with Google, subject to Google's Privacy Policy.

DM Shiyam serves users globally. Your data may be processed on servers outside your country of residence. Where data is transferred from the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with GDPR Chapter V.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of data we hold about you.
• Rectification: Correct inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Ask us to limit how we process your data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is consent-based, you may withdraw at any time.

To exercise any of these rights, email dmshiyamofficial@gmail.com. We will respond within 30 days.

We use industry-standard measures to protect your data including HTTPS encryption, hashed passwords, and access-controlled infrastructure. However, no system is completely secure and we cannot guarantee absolute security.

DM Shiyam is not intended for users under the age of 13 (or 16 in the EU). We do not knowingly collect data from children. If you believe a child has provided us data, contact us for immediate deletion.

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of the service after changes constitutes acceptance.

For any privacy concerns, contact dmshiyamofficial@gmail.com.