Privacy Policy

DirectChi (https://dm-chi.com) · Last updated: September 26, 2026

DirectChi is a service that automatically answers Instagram Direct messages and comments for the Instagram professional accounts that its users connect. This policy explains what data we process, why, and how you can have it deleted.

1. Data we collect

• Panel users: your mobile phone number (used to log in with a one-time SMS code), your subscription and payment records, and the settings, rules and flows you create.
• Connected Instagram accounts: when you connect an account through Instagram's official login, we receive and store an access token, the account's ID, username, name and profile picture. We never ask for or store your Instagram password.
• People who message or comment on a connected account: their Instagram-scoped ID, username, name and profile picture, the messages and comments they send to that account, and any answers they give to questions in a flow (for example a phone number they choose to share), together with tags and fields the account owner assigns.

2. How we use it

• To receive new messages and comments from Instagram and reply according to the rules and flows the account owner set up.
• To show conversations, contacts and activity reports in the account owner's panel.
• To operate subscriptions, limits and billing, and to keep the service secure.

We do not sell data, use it for advertising, or use it for any purpose other than providing the service to the account owner.

3. Sharing

Data is shared only as needed to run the service: with Meta/Instagram (to send and receive messages through the Instagram API), with our SMS provider (the phone number to deliver login codes), with our payment gateway (to process payments), and with a Telegram bot only if the account owner configures a flow step that forwards messages to their own Telegram. We may disclose data if required by law.

4. Storage and security

Data is stored on our servers. Instagram access tokens are encrypted, panel sessions use short-lived tokens, and all traffic uses HTTPS. Access tokens are used only by our servers and are renewed automatically while the account stays connected.

5. Retention

Data about a connected Instagram account and its contacts is kept while the account is connected to DirectChi. Raw webhook events are removed after 7 days. When an account is removed from DirectChi, its token, rules, flows, contacts, conversations and activity are deleted.

6. Your choices and deletion

• Account owners can remove a connected Instagram account at any time from the panel (Settings → Delete page); this deletes all of its data.
• You can revoke DirectChi's access in Instagram: Settings → Apps and websites (or Business integrations) → remove DirectChi.
• Anyone, including people who messaged a connected account, can request access to or deletion of their data by emailing us. See Data deletion instructions.

7. Children

DirectChi is a business tool and is not intended for children under 13.

8. Changes

We may update this policy; the date above shows the latest version.

9. Contact

Email: amylynnpena6@gmail.com