Legal

Privacy Policy

Last updated: April 17, 2026

The short version: IGFlow reads Instagram DM metadata only from threads you are actively viewing. We never collect your Instagram password, never read your private messages without your action, and never sell your data to anyone. Ever.

Who We Are

IGFlow ("we," "our," or "us") provides a web application and Chrome browser extension designed to help users organize and manage their Instagram direct message outreach. Our services are accessible at app.igflow.io.

What Data We Collect

We collect only the minimum data necessary to provide the service:

Account data: Your email address and encrypted password, used to authenticate your IGFlow account.
DM metadata: When you browse Instagram DMs with the extension active, we collect the Instagram handle, display name, last message text, message direction (sent/received), timestamp, and DM thread link for threads you actively open.
Outreach data you create: Message templates, sequences, and notes you enter into the IGFlow dashboard.
Usage data: Basic app analytics such as pages visited and features used, to improve the product.

We do not collect your Instagram password, access token, or credentials of any kind.

How the Chrome Extension Works

The IGFlow Chrome extension is injected only on instagram.com pages. It operates as follows:

It reads the URL, display name, handle, and last visible message text from the Instagram DM thread currently open in your browser tab.
It reads only what is already visible on your screen — it does not fetch historical messages, scroll through your inbox automatically (unless you explicitly use the auto-sync toggle), or access any Instagram data that you have not already loaded.
Data is transmitted over HTTPS to IGFlow's secure backend, authenticated with your IGFlow account token.
The extension does not run on any website other than instagram.com.

How We Use Your Data

To display your DM contacts and conversation history inside the IGFlow dashboard.
To power AI features such as lead scoring, profile analysis, and message personalization.
To enable outreach sequencing — queuing and sending messages from the extension sidebar.
To improve the reliability and performance of IGFlow's features.

We do not use your data for advertising, and we do not sell your data to third parties.

Data Storage and Security

Your data is stored in Google Firebase (Firestore), hosted in the United States. We use industry-standard encryption in transit (TLS) and at rest. Access to your data is restricted to authenticated requests using your IGFlow account token.

We retain your data for as long as you have an active IGFlow account. You may request deletion of your account and all associated data at any time by emailing us at [email protected].

Third-Party Services

IGFlow uses the following third-party services to operate:

Google Firebase / Firestore — Authentication and database hosting.
Google Cloud Run — Backend API hosting.
OpenAI API — Powers AI features such as lead scoring and message personalization. Data sent to OpenAI is governed by their Privacy Policy. We do not send personally identifying information beyond what is needed for the feature.
Stripe — Payment processing. We do not store your payment card details on our servers.

Instagram / Meta Compliance

IGFlow is an independent tool and is not affiliated with, endorsed by, or sponsored by Meta Platforms, Inc. or Instagram. IGFlow operates by reading data that is already visible to you in your browser and does not use Instagram's private API. Users are responsible for ensuring their use of IGFlow complies with Instagram's Terms of Service.

Your Rights

You have the right to:

Access the data we hold about you.
Correct inaccurate data.
Request deletion of your account and all associated data.
Export your contact and message data.

To exercise any of these rights, contact us at [email protected].

Children's Privacy

IGFlow is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you via email or an in-app notice. Continued use of IGFlow after any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please reach out:

Email: [email protected]
Website: app.igflow.io