Jopily
Privacy Policy
Last updated: 30 June 2026
This Privacy Policy explains how Jopily (“Jopily”, “we”, “us”, or “our”) collects, uses, stores, and deletes information when you use our application and services (the “Service”). Jopily helps Instagram business and creator accounts manage and reply to comments on their content.
By connecting your Instagram professional account to Jopily, you agree to the practices described in this policy.
1. Who we are
Jopily is operated by Hatched105 Leadership Ltd (“we”). Within Instagram’s permissions interface, our app may appear as “ReplyTracker-App-IG”. If you have any questions about this policy or your data, contact us at zara.braastad-korhonen@hatch105.com.
2. What information we collect
When you connect your Instagram professional account to Jopily, we collect and process the following, obtained through Meta’s official Instagram API:
- Account information — your Instagram account ID and username, used to identify the connected account.
- Access tokens— the authorization token that allows Jopily to access your account’s data on your behalf, in line with the permissions you grant.
- Comment data— comments left on your Instagram media (including the comment text, the commenter’s username, and the time it was posted), so we can display them to you and let you reply.
- Reply records — a record of which comments you have replied to through Jopily, so we can show their status accurately.
We only request the minimum permissions needed for these functions: instagram_business_basic and instagram_business_manage_comments.
We do not collect your Instagram password. Authorization is handled entirely through Meta’s secure login flow.
3. How and why we use your information
We use the information above solely to provide the Service. Specifically:
- To authenticate your account and maintain your connection to Instagram.
- To retrieve and display comments on your Instagram content within the Jopily dashboard.
- To post replies to comments on your behalf, when you choose to reply.
- To track which comments have been handled, so the dashboard reflects their status.
We do not use your data for advertising, we do not sell your data, and we do not share it with third parties except the service providers strictly necessary to operate the Service (see Section 5).
4. How we store and protect your information
- Your data is stored securely in our database, hosted by Supabase.
- Access tokens are stored on our servers only and are never exposed to your browser or any client device.
- Access to stored data is restricted to Jopily’s backend systems.
5. Service providers
We rely on a small number of third-party providers to operate the Service:
- Meta Platforms— provides the Instagram API through which your data is accessed, under Meta’s own terms and policies.
- Supabase — provides secure database hosting for the information described above.
- Vercel — provides hosting and infrastructure for the application.
These providers process data only as needed to deliver the Service and are bound by their own data protection obligations.
6. Data retention
We retain your information only for as long as your account remains connected to Jopily and as needed to provide the Service. When you disconnect your account, or when you request deletion, we delete the associated data as described in Section 7.
7. How to request deletion of your data
You have the right to request deletion of your data at any time. You can do this in any of the following ways:
- Disconnect your account — removing Jopily’s access from your Instagram settings (Instagram → Settings → Apps and Websites) revokes our access, and the associated stored data is removed.
- Email request — send a deletion request to zara.braastad-korhonen@hatch105.com and we will delete all data associated with your account.
- Automated deletion — if Meta sends us a data deletion request on your behalf, we process it automatically and remove the associated data.
We action deletion requests promptly and, where applicable laws require, within the legally mandated timeframe.
8. Your rights
Depending on where you live, you may have rights under data protection laws (such as the EU/UK General Data Protection Regulation), including the right to access, correct, or delete your data, and to withdraw consent. To exercise these rights, contact us at zara.braastad-korhonen@hatch105.com.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. We retain prior versions and will provide them on request.
10. Contact
For any questions, concerns, or requests regarding this policy or your data, contact us at:
zara.braastad-korhonen@hatch105.com
Hatched105 Leadership Ltd (trading as Jopily)