Privacy Policy

This Privacy Policy explains how Radikikk Ecommerce ("we", "us", or "our") collects, uses, and protects your information when you interact with our Instagram automation service. We are committed to handling your data responsibly and transparently.

1. Who We Are

Radikikk Ecommerce operates an Instagram automation tool that uses Meta's official Instagram Graph API to auto-reply to comments, send automated direct messages, and process product orders placed through DM conversations. Our service is hosted on Railway and integrates with Shopify for order fulfilment.

Contact: sreeragv18cp@gmail.com

2. What Data We Collect

We collect only the information needed to provide and operate our service:

• Instagram account information: Your Instagram username and publicly visible profile details (such as profile picture URL), obtained through the Instagram Graph API when you interact with our account.
• Comment text: The content of comments you leave on our Instagram posts or reels that trigger an automated reply.
• Direct message (DM) content: Messages you send to our Instagram account as part of automated keyword or comment-triggered DM flows.
• Order details (if you place an order via DM): Your name, phone number, and shipping address, collected through a guided DM conversation and used solely to fulfil your order via Shopify.

3. Why We Collect This Data

• To operate comment-to-DM automation: detecting trigger keywords and sending automated replies via Instagram's official API.
• To process product orders: fulfilling orders placed through DM conversations by creating them in our Shopify store.
• To improve service quality and review past interactions when handling support queries.

4. How We Use the Data

We use your data exclusively to deliver our service. We do not sell, rent, or trade your personal data to any third party for marketing purposes. Your Instagram data is accessed strictly through Meta's official Graph API and within the permissions you grant.

5. Who We Share Data With

We share your data only with the following trusted data processors, and only to the extent necessary to provide our service:

• Railway (railway.app) — our cloud hosting and infrastructure provider. Our application and its database run on Railway's servers. Railway may process data as part of normal hosting operations. See Railway's Privacy Policy.
• Shopify (shopify.com) — our e-commerce and order management platform. When you place an order via DM, your name, phone number, and shipping address are passed to Shopify to create and fulfil your order. See Shopify's Privacy Policy.
• Meta / Instagram — we use Meta's official Instagram Graph API to send and receive messages. Your interactions are subject to Meta's Data Policy.

We do not use any additional third-party analytics, advertising, or tracking services.

6. How Long We Retain Your Data

• Comment and DM interaction logs: Retained for up to 90 days to allow customer support and dispute resolution, then deleted.
• Order details (name, phone, address): Retained in Shopify for as long as required for order fulfilment and standard accounting/legal obligations (typically 7 years under Indian tax law — consult a lawyer for your jurisdiction).
• Instagram profile data (username, profile picture): Cached temporarily for service operation and cleared within 30 days or on request.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate data.
• Request deletion of your data (see our Data Deletion page).
• Object to certain types of processing.
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at sreeragv18cp@gmail.com. We will respond within 30 days.

8. Data Security

We implement reasonable technical and organisational measures to protect your data, including secure HTTPS transport, environment-variable-based credential management, and access controls. However, no system is 100% secure. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

9. Children's Privacy

Our service is not directed at children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. The "Last Updated" date at the top reflects the most recent revision. Continued use of our Instagram account or service after a change constitutes acceptance of the updated policy.

11. Contact Us