Back to home

Privacy Policy

Last updated: March 1, 2025

1. Introduction

ZapMob collects and processes the data necessary to operate its social media automation service (including Instagram). As the publisher of the service, we are committed to complying with the General Data Protection Regulation (GDPR) and applicable data protection laws.

2. Data we collect

We collect the following categories of data:

  • Account data: email address, password (always hashed, never stored in plain text).
  • Instagram data (via Meta OAuth): user ID, username, profile picture URL, incoming comments on posts connected to your Zaps.
  • Usage data: login logs, Zaps created, execution status (success/failure).
  • Technical data: IP address, user-agent (for security and abuse prevention).

3. How we use your data

Data is used to: provide the service (run Zaps: reply to comments, send DMs); authenticate the user; improve and maintain the service. We never sell your data to third parties. We do not read existing DM conversations. We do not store message content beyond delivery status (sent/failed).

4. Data sharing

Your data is shared only with: Meta/Instagram (via their API, to perform actions authorized by the user); hosting providers (Render for servers, Neon for PostgreSQL database) for the technical operation of the service. No other third party has access to your personal data.

5. Security

We implement appropriate technical measures: hashed passwords (never in plain text); encrypted Instagram tokens (pgp_sym_encrypt) in the database; HTTPS connections; API authentication via JWT. These measures are intended to protect the integrity and confidentiality of your data.

6. Retention

Data is retained for as long as your account is active. Upon account deletion or explicit request, personal data is deleted within the timeframes required by law, except where legal retention obligations apply.

7. Your rights (GDPR)

Under the GDPR, you have the right to access, rectify, erase (“right to be forgotten”), restrict processing, data portability, and to object. To exercise these rights, contact us by email at contact@zapmob.app. You may also lodge a complaint with your supervisory authority.

8. Cookies

We use only technical cookies necessary for the operation of the service (session/JWT management, essential preferences). We do not use advertising cookies or third-party tracking.

9. Changes

This privacy policy may be updated. In the event of a material change, we will notify you by email (to the address associated with your account). The date of the last update is shown at the top of this page.

10. Contact

For any questions regarding the protection of your data: contact@zapmob.app. Data controller: [TO BE COMPLETED — identity of the data controller].