Privacy Policy

Last updated: 5 October 2026

This Privacy Policy explains how SellHub (“SellHub”, “we”, “us”) collects, uses and protects information when you use our website and our Instagram auto-reply service (the “Service”). By using the Service you agree to this policy.

1. Information we collect

Account information. Your email address and a hashed (never plain-text) password.

Instagram data, when you choose to connect your account. Through Instagram’s official API, with your permission, we receive:

• your Instagram professional account ID and username;
• an access token that lets us act on your account (stored on our servers);
• messages sent to your account and comments on your posts, received in real time as webhook events so we can check them against your keywords. We request the permissions instagram_business_basic, instagram_business_manage_messages and instagram_business_manage_comments.

Configuration and activity data. The triggers and reply texts you create, and a log showing which trigger fired, when, and whether the reply was sent or failed.

Technical data. A session cookie that keeps you logged in, and standard server logs (IP address, user agent) used for security and troubleshooting.

Billing data. If you subscribe to Premium, payments are processed by Stripe. We store your Stripe customer and subscription IDs and your plan status, but never your card number or other payment details.

2. How we use information

• To provide the Service: check incoming messages and comments against your triggers and send the replies you configured, from your own account.
• To authenticate you, secure the Service and prevent abuse.
• To communicate with you about your account or the Service.

We do not sell your data, use it for advertising, build profiles of the people who message you, or use Instagram data to train machine-learning models. We use Instagram data only to provide the features you set up.

3. Message and comment content

The text of messages and comments is processed in memory to see whether it contains one of your keywords. We do not store the content of messages or comments, nor the identity of the people who wrote them. We only store the matched keyword, the time and the delivery status in your activity log.

4. Sharing

We share data only with: (a) Meta Platforms, Inc., because replies are sent through Instagram’s API; (b) infrastructure providers that host the Service on our behalf and are bound by confidentiality obligations; and (c) authorities where we are legally required to. Your use of Instagram is also governed by Instagram’s own privacy policy.

If you subscribe, we also share the data needed to process the payment with Stripe, Inc., which acts under its own privacy policy.

5. Retention

We keep account data, triggers and activity logs while your account is active. Your Instagram access token is deleted immediately when you disconnect your account or remove SellHub in Instagram’s settings. If you delete your account or request deletion, we erase your data within 30 days, except where the law requires us to keep it.

6. Your rights and choices

• Disconnect Instagram at any time from the Instagram tab in your dashboard, or remove SellHub under Instagram → Settings → Apps and websites. This revokes our access.
• Turn off or delete any trigger at any time.
• Access, correct, export or delete your data, and, where applicable (e.g. GDPR/UK GDPR/CCPA), object to or restrict processing, by contacting us at [email protected].
• See how to delete your data.

If you are in the EEA/UK our legal bases are performance of our contract with you (providing the Service) and our legitimate interest in securing it; you may complain to your local data-protection authority.

7. Security

Passwords are hashed with bcrypt, sessions use HTTP-only cookies, traffic is encrypted with HTTPS, and webhook requests from Meta are verified by signature. No system is perfectly secure, but we work to protect your information.

8. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

9. International transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

10. Changes

We may update this policy and will change the “Last updated” date above. Material changes will be notified in the Service or by email.

11. Contact

SellHub
Email: [email protected]