Privacy policy
Last updated September 28, 2026
AutoReply is a private, self-hosted tool its operator uses to send automatic private replies and messages, through Meta's official APIs, when people comment on or reply to content from the operator's own Instagram accounts.
Who operates it
This instance is run by a single operator for their own accounts. It is not a public service and does not offer sign-up.
Data we process
When you comment on, reply to a story from, or message one of the connected accounts, Meta sends us the event. We store your Instagram-scoped user ID and username, the text of the comment or message, and a log of the replies we sent. If you tap a tracked link in a reply, we record the click with a one-way hash of your IP address, never the address itself. For the operator we also store the connected account identifiers and their access tokens, encrypted at rest.
How we use it
Only to match keywords, send the reply you asked for, avoid sending duplicates, count link clicks for the operator's statistics, and troubleshoot failures. We do not sell data, show ads, or share it with anyone beyond the providers below.
Meta platform data
We never ask for Instagram passwords, scrape Instagram or automate a browser. All actions go through Meta's official APIs with permissions the account owner granted.
Service providers
Meta Platforms (Instagram APIs), Hetzner (server hosting in the EU), Cloudflare R2 (encrypted database backups) and GitHub (operator sign-in). They process data only as needed to run this tool.
Retention and deletion
The raw events Instagram sends are deleted after 30 days. Delivery logs are kept for the operator's statistics until deleted. Backups are kept for up to 30 days. You can ask for your data to be deleted at any time; see the Data Deletion page.
Contact
For privacy questions or requests, email contact@keddib.me.