Privacy Policy

Who We Are

javobchi.ai is a service of Nahl Group Inc., a Delaware corporation located at 16192 Coastal Hwy, Lewes, DE 19958, USA. Nahl Group Inc. is the company responsible for the personal data described in this policy (the data controller). If you have any question about this policy or your data, write to support@nahl-group.com.

Data We Collect

We handle the following kinds of data:

• Account data: the email address you use to sign in, the workspace created for you, and the email addresses of teammates you invite.
• Instagram connection data: the ID, username, and display name of the Instagram Business or Creator account you connect, and an access token that lets us act for that account. Tokens are encrypted at rest.
• Campaign data: the keywords, replies, messages, links, and settings you configure.
• AI reply settings: if you turn on AI replies, the business information you give the AI to answer with, such as products, prices, and delivery terms.
• Comment and message data: when someone comments on a post or reel of a connected account, or sends it a message that matches a campaign, we receive the comment or message text together with the Instagram username and ID of the person who wrote it. We record whether our reply was delivered. The account owner sees these records in the app as delivery logs and a list of people who commented a keyword.
• Instagram insights: views, reach, saves, shares, and interaction totals for the connected account's own posts and reels, and a daily total of its followers, used for the reports you see in the app. These are totals, not data about individual people.
• Link statistics: when someone opens a tracked link, we record the time, the referring page, the browser user agent, and a one-way hash of the IP address. We do not store the IP address itself.
• Payment data: the plan, amount, date, and status of payments you make. Card details are entered on the payment provider's page, and we never see or store full card numbers.
• Operational logs: technical records of errors and background jobs, used to keep the service running.

Conversations shown in the in-app inbox are read from Instagram when you open them and are not kept in our database.

How We Use Data

We use this data only to run the service for you: to sign you in, connect your Instagram account, match comments and messages to your keywords, send the replies you configured or the AI replies you turned on through the official Instagram API, show you your inbox, avoid duplicate sends, show you delivery logs and reports, process payments, fix problems, and protect the service from abuse.

We do not sell personal data. We do not use Instagram data for advertising, and we do not use it to build profiles of the people who comment on or message your account.

Instagram And Meta

javobchi.ai connects to Instagram through Instagram business login and uses only the permissions you approve on the consent screen: reading basic account information, managing comments, managing messages, and reading account insights. We never ask for your Instagram password, we do not scrape Instagram, and we do not use browser automation.

We only act on comments and messages that belong to accounts you connected. A private reply is sent only to a person who commented on your post or reel, and messages are sent only to people who wrote to your account first, within the time window Instagram allows. Our use of Meta data follows the Meta Platform Terms and Instagram policies.

Artificial Intelligence

AI replies are optional and off until the account owner turns them on. When they are on, javobchi.ai can answer incoming messages, personalize private replies to keyword comments, and draft replies in the inbox for the owner to edit. To write a reply, we send the text of the comment or message, the recent messages in that conversation, and the business information the owner provided to Anthropic, which runs the Claude AI model. Anthropic uses this data only to return the reply and does not use it to train its models.

The owner can turn AI replies off at any time and can see every reply that was sent in the delivery logs. When the owner answers a conversation personally, AI replies pause in that conversation.

Who We Share Data With

We share data only with the providers needed to operate the service:

• Meta Platforms (Instagram), to receive comments and messages for connected accounts and to send the replies you configured.
• MVPS LTD, our server hosting provider, which stores the data described above on our servers.
• Resend, which delivers sign-in emails.
• Anthropic, only when AI replies are turned on, to write those replies.
• Payme and Stripe, which process payments for paid plans.

These providers may use the data only to provide their service to us. We may also disclose data when the law requires it or to protect the rights and safety of users and the service.

Security

Access tokens are encrypted at rest. Traffic to the service is sent over HTTPS. Webhook requests from Meta are verified by signature before they are processed. No system is perfectly secure, but we take reasonable steps to protect your data.

How Long We Keep Data

• Instagram access tokens: until you disconnect the account or remove javobchi.ai from your Instagram settings.
• Campaigns and settings: until you delete them or disconnect the account they belong to.
• Commenter usernames, IDs, and comment text in delivery logs: 90 days. After that we keep only anonymous counts for your reports.
• Raw webhook data received from Meta: 30 days.
• Link click statistics: 365 days.
• Technical logs: 90 days.
• Account email and workspace: until you ask us to delete your account.
• Payment records: as long as tax and accounting law requires.

Disconnecting an Instagram account deletes its token, campaigns, delivery logs, tracked links, and follower counts right away. When you ask us to delete your data, we do it within 30 days. See the Data Deletion page for every way to do this.

Your Rights

Depending on where you live, including under some United States state privacy laws, you may have the right to ask what data we hold about you, to correct it, or to have it deleted. To use these rights, email support@nahl-group.com. We may need to confirm your identity first.

People Who Comment

If you commented on a post of an account that uses javobchi.ai or sent it a message, and want the record of your comment or of our reply removed, email support@nahl-group.com with your Instagram username and we will delete it.

Children

The service is for businesses and creators and is not directed at anyone under 18. We do not knowingly collect data from children.

Changes

We may update this policy. The date at the top shows when it last changed. If a change is significant, we will tell signed-in users.

Contact

Nahl Group Inc.
16192 Coastal Hwy, Lewes, DE 19958, USA
support@nahl-group.com