Privacy policy

Last updated: October 2026

Jussflow ("we", "us") is a social media automation tool for Instagram creators. This policy explains what data we collect through the Jussflow application and how it is used.

What we collect

• Your account email address, used to log in to Jussflow.
• If you sign in with Google or Facebook: your name, your profile picture and your email address, as that service shares them with us. We use the email address as your login (and to link the sign-in to a Jussflow account you already have with the same email), and the name and picture to show who is signed in. We do not receive your friends, posts or anything else from your Google or Facebook account, and we do not use this data for anything other than your Jussflow account.
• Your connected Instagram Business or Creator account's basic profile info (username, follower count) and a Meta access token, obtained when you connect your account, either by logging in with Instagram or through Facebook Login. If you log in with Instagram, you do not need a Facebook account or Page, and we receive nothing from Facebook.
• The automations you configure (reply/DM messages, trigger keywords, scheduled post captions and images) and the comments they act on.
• People who interact with your account through Jussflow: their Instagram name and username, the messages we send them for you, and email addresses they give in a direct message.
• Your storefront, products and uploaded files, the orders buyers place (buyer name, email and amount), your email sequences, and the Razorpay details you save to receive payments (stored encrypted).

How we use it

Your Meta access token is used solely to perform the actions you configure: publishing scheduled posts, posting public replies to comments, and sending automated direct messages in response to comments on your own connected account. We do not use your data for advertising, and we do not sell it or share it with third parties for their own use.

Service providers

We use other companies to run Jussflow, and they process your data only to provide that service to us: Supabase (our database, sign-in and file storage), Vercel and Render (hosting), Resend (sending email, such as sign-in and verification emails) and Razorpay (payments). Where you sign in with Google or Facebook, that service also processes your sign-in under its own privacy policy.

How we store it

Access tokens are encrypted at rest (AES-256-GCM) before being stored in our database. Only the automation you explicitly configure is ever executed on your behalf.

Your controls

You can disconnect your Instagram account at any time from the Jussflow dashboard. Disconnecting pauses every automation tied to that account and stops it from being used — it does not delete your automation history, so reconnecting the same account later resumes where you left off. To have your data deleted, see our data deletion page. Our terms of service explain the rules for using Jussflow.

Contact

Questions about this policy can be sent to the email address associated with your Jussflow account.