1. Who we are

Trentzy (“we”, “us”) provides Instagram DM automation and related workspace tools. This policy explains what we collect when you visit https://trentzy.com, create an account, or use the Service.

For privacy requests, write to [email protected]. We operate from Rajkot, Gujarat, India.

2. Data we collect

We collect only what we need to run the product, bill you, and keep the Service secure.

• Account data: name, email, password hash, organization name, role, and authentication tokens (including Google sign-in if you use it)
• Workspace data: Instagram account connection metadata, conversations, messages, comments, automation rules, saved replies, leads, customers, tags, notes, and optional products, quotes, invoices, or giveaways you create
• Billing data: plan, subscription status, billing address/state, optional GSTIN, and payment references handled by Razorpay — we do not store full card numbers
• Technical data: IP address, device/browser type, and security logs needed to operate and protect the Service

3. Instagram and Meta

When you connect Instagram, Meta provides data through official APIs and webhooks (for example, incoming DMs, comments, and profile fields available to your connected account). We process that data only for your organization — to show the inbox, run the rules you configured, send replies you approved, and create lead/customer records.

We do not sell Instagram conversation data. You can disconnect Instagram in Settings; we then stop receiving new events for that account. Residual copies may remain in backups for a limited period as described below.

4. How we use data

We use data to provide the Service, authenticate users, enforce organization isolation, send transactional email (verification, password reset, invites), process subscriptions, prevent abuse, and improve reliability. We do not use your inbox content to train third-party AI models, and the current product does not include AI reply generation.

5. Sharing

We share data only with processors who help us run the Service, under contracts that require them to protect it:

• Meta Platforms, as required to connect Instagram and send/receive messages you initiate
• Razorpay, to collect subscription payments and issue GST invoices
• Email and hosting/infrastructure providers we use to operate the application, database, cache, and queues
• Authorities when required by law

6. Multi-tenancy and security

Every customer record is scoped to an organization. Server-side checks use the organization from your authenticated session — not an organization ID supplied by the browser alone. Passwords are hashed. Access tokens and Instagram secrets are not exposed to other tenants. We use HTTPS in production, rate-limit authentication endpoints, and validate webhook signatures.

7. Retention

We keep account and workspace data while your organization is active. After deletion or a confirmed closure request, we delete or anonymize personal data within a reasonable period unless law requires us to keep invoices, tax records, or security logs. Soft-deleted records may exist until purge jobs complete.

8. Your choices

You can update profile details, manage team members, disconnect Instagram, and export or delete records your role allows inside the dashboard. You may request access, correction, or erasure of personal data by emailing us. We will need to verify the request and may refuse where we must keep data for tax, dispute, or security reasons.

If you are in India, you may have rights under the Digital Personal Data Protection Act, 2023. If you are in another region with privacy laws that apply to our processing, we will honour those rights where required.

9. Cookies

We use essential cookies and local storage for authentication, session security, and preferences (for example theme). We do not use advertising cookies on the marketing site.

10. Children

The Service is not directed at children under 18. We do not knowingly collect their personal data.

11. Changes

We will post updates on this page with a new effective date. If a change is material, we will provide additional notice where required.