Privacy Policy

Drazen is comment-to-DM automation for Instagram, operated by DESQY (Dubai, United Arab Emirates). This policy explains what data we handle when you use drazen.ai and app.drazen.ai, why we handle it, and what we do with it. We keep it plain, because that is how we write everything.

What we collect from you

• Your account details. Your email address and your password, which is stored only as a secure hash by our authentication provider, never in plain text.
• Your Instagram connection. When you connect an Instagram account through Instagram's official login, we store the account's Instagram ID, its username, and the access token Instagram issues, which is what lets Drazen see comments and send DMs as that account. We never see or store your Instagram password.
• Your automations. The post you chose, your keywords, the DM message and link you wrote, and your public reply texts.
• Billing details, if you upgrade. Payments are handled by Stripe. We never see or store your card number. We keep your subscription status and invoice history. Charges appear on statements as DESQY* DRAZEN.
• Basic technical logs. Standard request logs used to run and secure the service.

What we process on your behalf

When someone comments on a post you automated, Instagram sends us the event and Drazen acts on your instructions. As part of that we store a delivery log: the comment's ID, the commenter's Instagram ID and username, which keyword matched, whether the DM and the public reply were sent, and when. The log exists so your counters are accurate, so nobody ever gets the same DM twice for one comment, and so you can see what happened. The comment text itself is checked against your keywords in the moment and is not kept in our database.

Instagram data

Drazen uses Instagram's official API. It only accesses the data needed to do its job: your basic profile, your recent posts (so you can pick one), comments on the posts you automated, and the ability to send private replies and comment replies as you. Drazen never posts content for you and never messages anyone who has not commented on a post you chose. You can revoke Drazen's access at any time from your Instagram settings, and disconnecting the account in Drazen removes our access too. Our use of data received from Meta's platform follows the Meta Platform Terms.

We do not sell your data or your commenters' data. We do not use it for advertising.

Cookies and analytics

drazen.ai uses a Meta pixel for measuring our own ads, and only after you accept it in the cookie banner. The app at app.drazen.ai sets no tracking cookies; the cookies it does set are essential ones for keeping you signed in.

Where your data lives

Account and automation data is stored with Supabase (hosted in London, UK). The service runs on Vercel. Payments run through Stripe.

Deleting your data

Disconnecting an Instagram account removes Drazen's access immediately, and you can also revoke it from the Instagram side at any time. Deleting an automation deletes it. To delete your account and everything stored with it, message us and it is done within 30 days.

Contact

Anything about privacy: hello@groundedlabs.io.