Privacy Policy

Last updated: 2026-09-22

1. Who we are

Convozy (“Convozy”, “we”, “us”) is a product of Orincore, available at convozy.orincore.com. Convozy helps Instagram creators automatically reply to comments and send direct messages when a viewer comments a chosen keyword on a post or Reel.

2. What we collect

When you (a creator) connect an Instagram Business Account to Convozy, we collect:

• Your Instagram Business Account ID, username, and a long-lived access token issued by Meta, which we store encrypted at rest (AES-256-GCM) and never in plain text or logs.
• Your account details for Convozy itself: email address and a hashed password.
• Billing details processed by our payment providers (Stripe, Razorpay). We do not store full card numbers ourselves.

When someone comments on, or sends a direct message in response to, one of your posts or Reels, and that comment matches an automation you’ve set up, we process:

• The commenter’s Instagram-scoped user ID and username.
• The text of the comment or message, only as needed to match it against your automation rules and to send the configured reply.

3. How we use it

• To operate the comment-to-DM automation you configure: matching keywords and sending the reply you set up, via the Instagram Graph API.
• To show you delivery status and basic analytics for your own automations.
• To enforce plan limits (e.g. free-tier monthly send caps) and process billing.
• If you explicitly enable an AI-powered feature (e.g. AI-drafted replies), the relevant comment/message text is sent to our AI provider solely to generate that reply. This only happens for automations where you’ve turned an AI feature on.

We do not sell your data, or your audience’s data, to third parties.

4. Data retention

We retain comment/message event data and delivery logs for as long as your account is active, to power analytics and automation history. You can request deletion of your account and associated data at any time. See our Data Deletion Instructions.

5. Your rights

You can request access to, correction of, or deletion of your data by contacting us at privacy@orincore.com. Disconnecting an Instagram account from Convozy immediately stops us from making further Graph API calls on your behalf and revokes our use of the associated access token.

6. Third-party services

Convozy relies on the Meta Graph API (Instagram), Stripe and Razorpay (payments), and, only for opted-in AI features, a third-party AI provider. Each of these processes data under their own privacy policy in addition to this one.

7. Security

Instagram access tokens are encrypted at rest. All traffic to Convozy is served over TLS. See our engineering practices for more detail if you have questions: privacy@orincore.com.

8. Children’s privacy

Convozy is not directed at children under 13, and we do not knowingly collect data from them.

9. Changes to this policy

We’ll update the “Last updated” date above when this policy changes, and post material changes here.

10. Contact

Questions about this policy: privacy@orincore.com