Privacy Policy

Last updated: March 20, 2026

1. Introduction

GrowProfile ("we", "us", "our") is operated by ScorpixMedia. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at growprofile.in and our Instagram automation services (collectively, the "Service"). By using the Service, you consent to the practices described in this policy.

We comply with Meta Platform Terms and Developer Policies. We use Instagram APIs provided by Meta Platforms, Inc.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name and email address when you create an account via Google or email authentication.
  • Payment Information: Billing details processed securely through Stripe and/or Razorpay. We do not store full credit card numbers.
  • Campaign Configuration: Keywords, DM templates, and campaign settings you create.

2.2 Information from Instagram (Meta Platform)

  • Instagram Account ID and Username: Used to identify your professional account.
  • Access Tokens: OAuth tokens granted by Instagram via the official Meta login flow. We do NOT collect your Instagram password.
  • Media & Comments: Public posts and comments on your media, accessed via the official Instagram Graph API to power automation.
  • Direct Messages: We send automated DMs on your behalf through the Instagram Messaging API. We store message delivery status and metadata but do not read or store messages sent to you by other users.
  • User Interactions: Comment triggers, reply events, and automation-related metadata.

2.3 Automatically Collected Information

  • IP address, browser type, and device information for security and analytics.
  • Usage data including pages visited and features used.

3. How We Use Information

  • Provide the automated comment-reply and DM messaging features.
  • Detect keywords in comments and trigger automation workflows.
  • Send automated responses on your behalf as configured by you.
  • Improve platform performance, reliability, and user experience.
  • Process payments and manage subscriptions.
  • Ensure compliance with Meta Platform Policies and applicable laws.
  • Send service-related communications such as security alerts and policy updates.

4. Data Sharing

We do NOT sell, rent, or trade your personal data to third parties.

We may share data only in the following circumstances:

  • When required by applicable law or legal process.
  • To comply with Meta Platform Terms and Developer Policies.
  • With payment processors (Stripe, Razorpay) solely to process transactions.
  • To provide core functionality of the Service to you.

5. Data Storage and Security

  • All Instagram access tokens are encrypted at rest using AES-256-GCM encryption.
  • We implement industry-standard security measures including HTTPS, encrypted storage, and access controls.
  • Data is stored only as long as necessary to provide the Service or as required by law.
  • We do NOT expose tokens in the frontend or log sensitive credentials.

6. User Control and Data Deletion

You have full control over your data:

  • You can disconnect your Instagram account at any time from your dashboard settings.
  • You can delete your GrowProfile account and all associated data at any time.
  • To request complete data deletion, visit our Data Deletion page or email support@growprofile.in.
  • Upon request, we will delete all your data within 7 business days, including access tokens, campaign data, and interaction history.

7. Third-Party Services

GrowProfile uses the following third-party services:

  • Meta (Instagram) APIs — for authentication and automation features. Subject to Meta Platform Terms and Meta Privacy Policy.
  • Firebase (Google) — for user authentication.
  • Stripe / Razorpay — for payment processing.

8. Automated Messaging Disclosure

GrowProfile sends automated messages on behalf of users only when triggered by user-defined conditions (e.g., a comment containing a keyword). End-users receiving automated messages may be informed that they are interacting with an automated system. Messages are only sent within the 24-hour messaging window permitted by Instagram policies.

9. Children's Privacy

GrowProfile is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or data requests: