Privacy Policy

KomenKirim is operated by Eduversal. For the accounts and workspaces of our customers we decide how their data is used. For the comments and messages that people send to our customers' social accounts, we process that data for our customers, to run the automations they set up.

From you, when you use the service:

• your name, email address and a protected (hashed) version of your password;
• the workspaces you belong to, your role, and invitations you send or receive;
• your signed-in devices: browser, device type and a partly hidden IP address, so you can see and end sessions;
• the automations, templates and texts you create;
• technical records needed to keep the service secure and working, such as sign-in attempts and error logs.

From Meta, for the social accounts you connect:

• the account's ID, username and access token (stored encrypted);
• posts, reels and stories: captions, thumbnails, links and dates;
• comments and direct messages sent to the account, and taps on buttons the automation sent, including the sender's account ID and username;
• whether a person follows the account, checked only when an automation asks people who do not follow yet to follow.

• to run the automations: read comments and messages, decide which automation applies, and send the replies you set up;
• to show you your activity, posts and results in the dashboard;
• to sign you in, protect accounts, prevent abuse and fix problems;
• to send service emails, such as email confirmation, password reset and invitations;
• to meet legal obligations.

We do not sell personal data, do not use it for advertising, and do not use the content of comments or messages for anything other than running your automations.

• Meta, to read comments and messages and to deliver your replies;
• the providers that host our servers and database and send our emails, who may only use the data to provide their service to us;
• authorities, when the law requires it.

Inside a workspace, its members can see the workspace's data according to their role.

Connections are encrypted (HTTPS). Access tokens from Meta are stored encrypted (AES-256-GCM). Every page and action checks your role in the workspace, and each workspace can only reach its own data. Sign-in attempts are rate limited.

We keep your data while your account or workspace exists, because the service needs it, for example to avoid sending the same person the same message twice.

When a workspace is deleted, its connected accounts, automations, templates and contacts are deleted right away. Records of received comments and messages and of sent replies can remain afterwards; ask us and we will delete them within 30 days.

Meta's posts, comments and messages that we read are only kept for the purposes above.

You can see and change your profile, end sessions on other devices, and delete a workspace you own. You can also ask us for a copy of your data, to correct it, to delete it, or to stop a use you object to.

To make a request, please use the contact details on komenkirim.com. We may need to confirm it is you before we act on it.

If you comment on or message an account that uses our service, the reply you get comes from that business, and that business decides how it uses your data.

You can ask the business directly, or ask us, to delete what our service stored about you. Please use the contact details on komenkirim.com, and include your Instagram username and the account you contacted.

We only use cookies the service needs: to keep you signed in, to remember the account you picked, and a short-lived encrypted cookie while you connect an Instagram account. We do not use advertising or analytics cookies.

The service is for businesses and is not meant for children. You must be old enough to agree to these terms in your country.

We will update this policy when the way we handle data changes, and tell you in the app or by email when a change matters.

Questions about privacy? Please use the contact details on komenkirim.com.