Privacy Policy

SweetFlow ("SweetFlow", "we", "us") is a companion app for Instagram professional accounts. It helps the person who runs an account moderate comments and direct messages, run keyword-triggered automations, and understand growth metrics. This policy explains exactly what we collect when you connect an Instagram account or sign in with Google, why we collect it, how it is processed, and how to have it deleted.

What we collect

We collect the following, and nothing beyond it:

• Instagram profile and media (via the instagram_business_basic permission) — the connected account's profile information (username, account ID, account type, profile picture) and the list of its posts and media.
• Comments (via instagram_business_manage_comments) — the text and metadata of comments on the connected account's posts, and the actions taken on them (hiding, deleting, or replying).
• Direct messages (via instagram_business_manage_messages) — the content of Instagram direct messages sent to and from the connected account, including messages SweetFlow sends automatically as private replies to comments.
• Account and post metrics (via instagram_business_manage_insights) — reach, views, follows, and profile visits, at the account level and per post.
• Google identity — when you sign in with Google to use SweetFlow, we receive your name, email address, and profile picture from Google. We use this to create and secure your SweetFlow account and are not affiliated with Google.

Why we collect it

• Moderation. Comment and direct message text is reviewed so that content that looks racist, abusive, or spam-like can be flagged for the account owner to hide, delete, or otherwise act on. SweetFlow does not take irreversible action on your behalf without your configuration.
• Keyword automations. You can configure rules that trigger an automatic action (such as a reply or a private message) when a comment matches keywords you choose.
• Growth recommendations. Account and post metrics are summarized into a digest used to generate written suggestions for growing the account.
• Account access. Your Google identity is used to sign you in and identify which Instagram account(s) you have connected.

Automated processing, including by AI

To flag abusive content and spam, the text of comments and direct messages is sent to a third-party AI model for classification. To generate growth recommendations, a digest of account and post metrics is sent to a third-party AI model, which returns written suggestions. This is how moderation flags and growth recommendations are produced — we are stating it plainly because it is central to how the product works, not an incidental detail.

What we do not do

• We do not sell your data, or the connected account's comments, messages, or metrics, to anyone.
• We do not share this data with advertisers.
• We do not use it to train third-party AI models. It is sent to those models only to produce the classification or recommendation described above, for your account.

How long we keep it

• Comment records are kept for 12 months.
• Direct message records are kept for 12 months.
• Metrics and insights records are kept for 24 months.

Disconnecting an Instagram account from SweetFlow deletes its stored comments, messages, and metrics ahead of these windows.

Deleting your data

There are two ways to have your data deleted:

• Disconnect inside SweetFlow. Removing a connected Instagram account from your SweetFlow settings deletes that account's stored comments, messages, and metrics.
• Meta's data deletion request. If you remove SweetFlow from your Instagram account's authorized apps, Meta sends us a data-deletion callback, and we delete the corresponding stored data in response.

Contact

Questions about this policy or your data can be sent to privacy@sweetflow.io.