Privacy Policy

DMGO Technologies ("DMGO", "we", "us", or "our") provides a SaaS platform that helps creators and businesses automate Instagram engagement and monetize their audience through bio links, digital products, and related tools. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It also describes how we handle information accessed through the Instagram Graph API and the Meta Platform, and — where you choose to enable it — through the Google APIs (Google Calendar and Google Sheets).

1. Information We Collect

a) Account information you provide: name, email address, phone number, country/timezone, and a securely hashed password.

b) Instagram information (via the Meta Platform): when you connect an Instagram professional account through Instagram Business Login, we access - only with your authorization - the following:

c) Usage & technical data: IP address, device/browser type, log and diagnostic data, and records of automation activity.

d) Billing and commerce data: subscription and payment records; buyer contact details; policy-consent evidence; and, for seller-fulfilled physical products, the shipping address, delivery identifiers, and fulfilment status needed to process the order. Card/UPI details are processed by our payment provider (Razorpay) and are not stored on our servers.

f) WhatsApp data: if you connect WhatsApp Business (Meta Cloud API, directly or through our WhatsApp partner AiSensy), we store your WhatsApp account details, your contacts (name, phone number, tags, opt-in status), conversations and messages, templates, campaigns and flow submissions so your automations and inbox work. We also use WhatsApp to send you one-time passwords for sign-up and phone verification.

g) AI features: if you turn on AI replies or a knowledge base, the customer message being answered and relevant parts of your knowledge base (text you write or pages you link) are sent to the AI model provider configured for DMGO (Google Gemini, Groq, OpenAI or Anthropic) to generate a reply. Providers do not get your account password or payment data. You can switch AI features off at any time.

h) Payout KYC: creators who receive payouts provide legal name, PAN, address and bank account details, which we share with Razorpay to create and verify the payout (Route) account.

i) Sign-up, login and security data: the campaign that brought you to DMGO (UTM tags, Google/Meta click IDs — only with marketing-cookie consent), your sign-up IP address, login history (time, IP, device) and security events.

j) Your audience’s data: buyers, leads, Instagram followers who interact with your automations, WhatsApp contacts and bio-link subscribers. For this data you (the creator) decide why and how it is used, so you are the Data Fiduciary and DMGO acts as your Data Processor, processing it only to provide the features you use. If you connect outbound webhooks or Google Sheets, DMGO sends this data to the destination you choose. People in your audience can contact you, or DMGO’s Grievance Officer, to exercise their rights.

e) Seller disclosures: creators who sell through DMGO provide buyer-facing legal/business name, support and grievance contacts, business address, and GST registration status where applicable. These details are displayed before payment and preserved with transaction records.

2. How We Use Your Information

• To operate the core service: read comments that match your keywords, post automated replies to those comments, and send the DMs you configure.
• To display your connected accounts, automations, and analytics in your dashboard.
• To authenticate you, secure your account, and prevent abuse or fraud.
• To process subscriptions and provide customer support.
• To communicate important service, security, and policy updates.

3. Permissions We Request from Meta

DMGO requests only the permissions needed to provide its features:

• instagram_business_basic - to connect your account and read your basic profile and media.
• instagram_business_manage_comments - to read comments on your posts and reply to them automatically.
• instagram_business_manage_messages - to send and receive direct messages through your automations.

DMGO may also request instagram_business_content_publish and instagram_business_manage_insights so connected professional accounts receive the same complete Instagram business authorization bundle used for content access, diagnostics, and account health.

4. Google User Data (Calendar & Sheets Integrations)

Connecting a Google account to DMGO is an optional feature, turned off by default. If you enable it, we request access — only after you grant consent on Google's own authorization screen — to the specific Google user data needed to power the integration you turn on:

We use this Google user data solely to provide the features above. You can disconnect your Google account at any time from your DMGO dashboard, or revoke DMGO's access from your Google Account permissions page. On disconnect, the stored Google access and refresh tokens are deleted from our active systems.

We do not use Google user data for advertising, we do not sell it, and we do not let humans read it except where necessary for security or to comply with applicable law, or with your explicit consent.

5. How We Share Information

We do not sell your personal information. We share data only as needed to run the service:

• Meta / Instagram - to perform the actions you authorize on your account.
• Razorpay - to process payments securely and support creator payout onboarding.
• Independent sellers - to fulfil creator products, including physical delivery and customer support, when you buy from them.
• Service providers (sub-processors) that process data on our behalf under contract, listed in the table below.
• Legal - when required by law, regulation, or to protect rights and safety.

International transfers. Some of our infrastructure and payment providers may store or process data on servers located outside India. Where data is transferred across borders, we do so only with providers bound by confidentiality and appropriate data-protection safeguards, and in accordance with applicable law (including the DPDP Act and, where relevant, the GDPR).

6. Data Retention

We retain information while an account is active or as needed to provide the service. After a verified deletion request, sessions and connected-platform credentials are revoked promptly and deletable operational data is purged or anonymized through a tracked lifecycle. Limited transaction, invoice, tax, payout, fraud-prevention, chargeback, security, and dispute records may be retained or pseudonymized where required for legal obligations or legitimate claims. See the Data Deletion page for the staged process.

7. Data Deletion & Your Rights

We process your personal data on the basis of the consent you give when you create an account and connect your Instagram account, and to perform the contract of providing the service. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws (including the GDPR where it applies to you), you have the right to:

• Access the personal data we hold about you and a summary of how it is processed.
• Correction & updating of inaccurate or incomplete data.
• Erasure / deletion of your data and account.
• Withdraw consent at any time - as easily as you gave it - by disconnecting your Instagram account, deleting your DMGO account, or emailing us. Withdrawing consent does not affect processing already carried out, and may mean parts of the service can no longer function.
• Data portability and, where applicable under the GDPR, the right to object to or restrict certain processing.
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity (DPDP Act).
• Grievance redressal - raise any complaint with our Grievance Officer (see Section 13) and, if unsatisfied, escalate to the Data Protection Board of India.

You can disconnect any Instagram account from within your dashboard, and you can delete your DMGO account entirely. For full instructions, see our Data Deletion page. You may also revoke DMGO's access from your Instagram app settings at any time. To exercise any right, email team@dmgo.in; we respond within the timelines described in Section 13.

8. Security

We use technical and organizational safeguards - including encryption in transit, hashed passwords, and restricted access - to protect your data. No system is completely secure, but we continuously monitor and improve our controls.

9. Children's Privacy

DMGO creator accounts are for adults: you confirm you are 18 or older when you sign up. Buyers confirm at checkout that they are 18 or older or have a parent or guardian’s permission. We do not knowingly process children’s data for tracking, behavioural monitoring or targeted advertising, and creators must not target their DMGO pages or automations at children. If you believe a child has given us data without a guardian’s consent, contact the Grievance Officer and we will delete it.

9A. Personal Data Breaches

If a personal data breach affects you, we will tell you without undue delay — what happened, the likely impact, what we are doing about it and what you can do — and report it to the Data Protection Board of India and CERT-In as the law requires.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date.

11. Contact Us

For any privacy question or request, contact us at team@dmgo.in. For formal correspondence, use the registered office address listed above.

12. Cookies & Similar Technologies

Strictly necessary cookies are always on. Analytics and marketing cookies are used only if you allow them in the cookie banner; you can change or withdraw your choice any time via “Cookie settings” in the site footer or in Dashboard → Settings.

13. Grievance Redressal & Grievance Officer

In accordance with the Information Technology Act, 2000 and rules thereunder, the Consumer Protection (E-Commerce) Rules, 2020, and the Digital Personal Data Protection Act, 2023, you may address any grievance about your personal data or this policy to our Grievance Officer:

We will acknowledge your complaint within 24 hours and resolve it within 15 days of receipt (requests to remove unlawful content are handled within 72 hours). If you are not satisfied with the resolution, you may escalate to the Data Protection Board of India as provided under the DPDP Act.