Who we are
Askenly (“we”, “us”) is operated by [COMPANY LEGAL NAME]. We provide Instagram DM automation, an inbox, booking, content scheduling and email follow-ups for businesses and creators (“customers”).
For your own account data we are the controller. For the messages, contacts and bookings a customer handles through Askenly, the customer is the controller and we process that data on their behalf and on their instructions.
Information we collect
Account information: your name, email address, password (stored only as a secure hash by our authentication provider), workspace name, team members and their roles.
Business information you enter: business profile, opening hours, services, FAQ answers, automations, links, posts and email sequences.
Instagram data, when you connect an Instagram professional account through Instagram Login:
- your Instagram account ID, username and profile picture;
- your posts, reels and active stories (captions, media links, permalinks) so you can choose which ones start an automation;
- comments on your posts and direct messages sent to your account, including the sender’s Instagram-scoped ID, username and name, and any files they send;
- basic post insights such as views, likes and comment counts;
- an access token, which we store encrypted and never show to any browser.
People who message a customer: their Instagram username and name, the messages they exchange with the customer’s account, and anything they choose to share in the chat, such as an email address, phone number or the details of a booking.
Billing: our payment processor collects your card details. We receive your plan, subscription status and invoice history, never your full card number.
Usage and device data: pages viewed, features used, approximate location from your IP address, browser type and error reports, used to run, secure and improve the service.
How we use information
- to provide the service: run the automations you set up, show your inbox, send the replies, emails and booking confirmations you configure, and publish the posts you schedule;
- to keep accounts secure: authentication, rate limiting, fraud and abuse prevention;
- to bill you and enforce plan limits;
- to provide support and send service messages, such as hand-off alerts and password resets;
- to understand and improve how the product is used, using aggregated usage data;
- to comply with law and enforce our Terms.
We do not sell personal information, and we do not use Instagram data or message content to advertise to anyone.
Instagram and Meta Platform data
We access Instagram only through Meta’s official Instagram API with Instagram Login, and only with the permissions you approve on Instagram’s consent screen. We use that data solely to provide the features you turn on for your own account, as required by Meta’s Platform Terms and Developer Policies.
You can disconnect Instagram at any time in Settings → Channels, or remove Askenly from your Instagram app under Settings → Apps and websites. Disconnecting stops all access; the access token is no longer used.
Google and Microsoft calendars and sheets
If you connect Google or Microsoft Outlook in Appointments, we use the access you approve only to add, update and remove events for your Askenly bookings in the calendar you choose, to read when you are busy in the calendars you choose so those times can't be booked, and (Google) to create one bookings spreadsheet in your Drive and keep each booking's row up to date. We read busy times only, not the details of your other events, and we can open only the spreadsheet we created.
Access tokens are stored encrypted. You can disconnect at any time in Appointments → Availability, which deletes the stored access; events and rows already added stay in your calendar and sheet. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
AI suggested replies
If your plan includes AI suggested replies, when you ask for a draft we send the last 10 messages of that conversation together with your business profile, hours, services and FAQ answers to the AI provider we use (Anthropic, OpenAI or OpenRouter). Drafts only fill your reply box; nothing is sent until you send it. We don’t send them anything else, and they receive it only to write that draft.
How long we keep information
We keep account and workspace data while your account is active. Operational records are deleted automatically on a schedule: processed background jobs after 14 days, incoming webhook events and error reports after 30 days, connection activity after 90 days, and unused uploaded files after 3–14 days. Security audit records are kept for about 13 months.
When you ask us to delete a workspace, we delete its data within 30 days, except where we must keep billing records for tax and accounting law.
Deleting your data
To delete your data:
- Disconnect Instagram in Settings → Channels, or remove Askenly in the Instagram app under Settings → Apps and websites.
- Send a deletion request from Help → Contact support while signed in, or email us at the address below from the email on your account. Tell us whether you want your login, your whole workspace, or the Instagram data only deleted.
- If you messaged a business that uses Askenly and want your messages deleted, contact that business, or email us with your Instagram username and the business’s name and we will pass the request on and help them carry it out.
We confirm deletion requests within 30 days. Deleted data is removed from backups as they roll over.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict some processing, and to withdraw consent. To use these rights, contact us as described below. You can also complain to your local data protection authority.
Security
Access tokens are encrypted at rest, every product table is isolated per workspace by database row-level security, connections use HTTPS, and access to production systems is restricted. No system is perfectly secure, so please use a strong, unique password.
International transfers
Our providers may process information in the United States and other countries. Where required we rely on appropriate safeguards such as Standard Contractual Clauses.
Children
Askenly is not directed to children under 16 and we do not knowingly collect their information.
Changes to this policy
We will post any changes on this page and update the date above. If a change is significant we will also tell you by email or in the app.
Contact us
[COMPANY LEGAL NAME], [COMPANY POSTAL ADDRESS]. Email: [PRIVACY CONTACT EMAIL]. Signed-in customers can also write to us from Help → Contact support.