Privacy policy
Linkar helps creators and businesses automate Instagram conversations and public Facebook Page comment replies. This policy explains what we collect, why we use it, and how you can ask us to delete it.
Information we receive
When you connect an Instagram professional account, we receive the account identifier, username where available, access token, and the Instagram comments, messages, media identifiers, and delivery events needed to run the rules you create. We also receive your workspace details and support messages.
When you connect a Facebook Page, we receive the Page identifier, Page name, encrypted Page access token, Page posts and top-level comments needed to run public comment-reply rules, and delivery results. Linkar ignores Page-authored and nested comment events for automation execution.
For comment-to-message automations, we store the Instagram-scoped participant identifier, source comment and media identifiers, interaction and delivery timestamps, and the latest follow-status result needed to enforce your configured follow gate and prevent duplicate delivery.
How we use information
We use this information to authenticate connected Instagram accounts and Facebook Pages, receive official Meta webhooks, evaluate your saved rules, send the replies you configured, prevent duplicate delivery, provide support, and keep the service secure. Linkar does not use AI-generated replies in this MVP.
Analytics and cookies
We use Google Analytics to understand how the site and app are used, on both our public pages and the signed-in application. Google sets cookies in your browser that distinguish one visitor from another across pages and visits. Google receives the page you viewed, the page title, the referring page, your device and browser details, and an approximate location that Google derives from your IP address.
Page addresses are shortened before they are sent. Where an address contains an identifier, such as a deletion request code, a workspace, or an automation, that part is replaced with a placeholder, and query strings and fragments are removed entirely. Google therefore receives the shape of the page you visited and not the identifiers in it. We do not send your name, email address, workspace, or connected account details to Google, and we do not link analytics activity to your Linkar account.
You can refuse or delete these cookies in your browser settings, or install Google’s opt-out browser add-on. Refusing them does not affect any automation you have configured. Analytics runs only when Linkar is configured with a measurement identifier, so it may be absent in some deployments.
Sharing and processors
We share information only with service providers needed to host the application, with Google for the site analytics described above, and with Meta’s APIs when you ask Linkar to send or receive Instagram or Facebook Page data. We do not sell personal information or use connected social content for advertising.
Storage and security
Access tokens are encrypted at rest. Webhook signatures are verified before processing, and event identifiers are deduplicated. No online service can guarantee absolute security; please use a strong account and workspace password and report suspected misuse promptly.
Retention and deletion
We retain workspace configuration and delivery records for as long as needed to provide the service or meet legal obligations. Instagram comment-to-message participant records are automatically deleted 90 days after their automation finishes running or after their messaging window closes without a reply. You can disconnect an Instagram account or Facebook Page in the app or request deletion sooner at /data-deletion. Meta callbacks are handled at the channel-specific data-deletion endpoints.
Your choices
You can stop an automation, disconnect a channel, request access to information associated with your workspace, or request correction or deletion. Contact [email protected] with your workspace and connected Instagram username or Facebook Page name.
Changes
We may update this policy as Linkar changes. We will update the date above and, where appropriate, notify account owners of material changes.