Privacy Policy

1. Who We Are

Slidin is operated by Luxuria Technology Ltd., registered at RAK Free Zone (RAKEZ), Ras Al Khaimah, United Arab Emirates ("Slidin", "we", "us"). Our customers are businesses and creators ("customers" or "account owners") who connect their Instagram professional account or Facebook Page to Slidin. For the data of the people who comment on or message those accounts, the customer decides what to do with the data and Slidin processes it on the customer's behalf. For our customers' own sign-in and billing data, Slidin is the controller. Contact us at support@slidin.net.

2. Data We Collect

From connected Instagram accounts and Facebook Pages

• Account and Page identifiers, usernames and names, and the access token that lets Slidin act for the account (stored encrypted).
• Post, reel and ad metadata (such as media IDs, captions and links) needed to choose which posts a campaign applies to.
• Comments on those posts, including the commenter's Instagram-scoped or Facebook ID, username or name, the comment text, and the time.
• The direct messages Slidin sends for you and the replies and button taps people send back, including message text and delivery status.
• Lead information that a person chooses to type in reply to a lead-capture question you configure (for example an email address, a phone number or free text), together with their ID, username and the campaign it came from.
• Follower-count snapshots of your account, recorded over time.
• Inbox contacts: people who have messaged your account, their ID and username, a preview of their latest message, and whether they follow your account.
• Raw event notifications ("webhook payloads") that Meta sends us about activity on your connected account, and operational and diagnostic events about our own processing.

From link tracking and referrals

If you use Slidin tracked links, when someone clicks one we record the click time, a one-way hash of the visitor's IP address (not the IP address itself), and their browser user agent. If you arrive through a Slidin referral link, we record which referral code you used.

From our customers

• Sign-in data: email address, a hashed password if you sign up with a password, or your Google account identifier and email address if you sign in with Google.
• Workspace data: workspace name, team members and their roles, campaign settings and message templates.
• Billing identifiers: your Stripe customer and subscription identifiers and plan status. Card details are entered with Stripe and never reach our servers.

Slidin never asks for your Instagram or Facebook password, never scrapes Instagram or Facebook, and does not use browser automation.

3. Why We Use Data, And Our Legal Bases

• To run the service you asked for: connect your accounts, match comment keywords, send the private replies and messages you configured, avoid sending the same campaign to the same person twice, show logs, leads, inbox and analytics. Legal basis: performance of our contract with you; for the people who comment or message, the legitimate interest of the account owner in answering them.
• To authenticate users, manage workspaces and take payment. Legal basis: contract.
• To troubleshoot failures, prevent abuse, keep the service secure and meet our legal obligations. Legal basis: legitimate interests and legal obligation.
• To contact you about your account, billing and service changes. Legal basis: contract and legitimate interests.

Where we rely on consent (for example when a person answers a lead-capture question), the person may withdraw it at any time by asking the account owner or us to delete their answer.

4. What We Do Not Do

• We do not sell Instagram, Facebook or any other personal data.
• We do not share Platform Data with advertisers, data brokers or analytics trackers, and we do not use it for advertising.
• We do not use Platform Data to build profiles of people or to make automated decisions about them beyond the keyword rules the customer configured.
• We do not use Platform Data to train artificial intelligence or machine-learning models, and we do not send it to AI providers.
• We use Platform Data only to run the customer's own campaigns, inbox and analytics.

5. People Who Comment Or Message

When someone comments on or messages a connected account, we process their ID, username or name, and the comment or message text to decide whether a campaign applies and to send the reply the customer configured. We keep delivery logs so the customer can see what was sent and so nobody receives the same campaign twice. If you are such a person and want your data removed, see Sections 9 and 10.

Lead capture

Customers can add a lead-capture question to a direct message. When it is on, Slidin saves the person's next reply in the customer's Leads list. We use lead answers only to show them to that customer, to export them at the customer's request, and to run and protect the service. Customers must say what the answer will be used for and must ask only for what they need.

6. Subprocessors

We use the following providers to run Slidin:

• Our server infrastructure: we operate a single virtual server that we rent from Contabo GmbH (France), which runs our web application, PostgreSQL database, Redis queue and database backups, and which holds all data described in this policy.
• Resend: sends transactional email (sign-in and account emails). It receives recipient email addresses and message content.
• Stripe: processes payments and subscriptions. It receives billing details and your email address. It receives no Instagram or Facebook data.
• Google: provides sign-in with Google, if you choose it. It receives the sign-in request and gives us your account identifier and email address.

Meta Platforms, Inc. and its affiliates are the source of Instagram and Facebook data and the channel through which we send messages. We use no AI or machine-learning providers and no advertising or analytics trackers.

7. How Long We Keep Data

8. Security

We use HTTPS/TLS for data in transit. Instagram and Facebook access tokens are encrypted at rest with AES-256-GCM. We verify the signature of every webhook Meta sends us, and access inside a workspace is controlled by roles. No system is perfectly secure, so we cannot guarantee absolute security.

If a breach affects your personal data, we will notify affected users and, where required, the relevant authorities without undue delay.

9. Deleting Your Data

• Removing Slidin from Instagram or Facebook (in Apps and websites settings), or submitting a Meta data-deletion request: all Platform Data for that connected account is deleted immediately and in any case within 30 days. Backups roll off within 14 days after that. A confirmation code and a status page are provided at /data-deletion.
• Disconnecting an Instagram account inside Slidin stops processing but keeps your campaigns and logs so you can reconnect it later. To delete everything, ask at /data-deletion or email support@slidin.net. We delete within 30 days.
• Disconnecting a Facebook Page inside Slidin deletes that Page's data.
• Leads, campaigns and inbox contacts can also be deleted by the account owner inside Slidin.

10. Your Rights

Depending on where you live, you have the right to access your personal data, have it corrected, receive a copy (export), have it deleted, and object to or restrict our processing. Account owners can see and export most of their data inside Slidin (for example, leads). People who commented, messaged or answered a lead-capture question can ask the account owner, or email us at support@slidin.net, and we will act on the request or pass it to the account owner. Use the same address to object to processing. We reply within 30 days. You may also complain to your local data-protection authority.

11. International Transfers

We process data in the location of our hosting provider. Data received from Meta may be processed outside your country, which may have different data-protection laws. Where required, we rely on appropriate safeguards for such transfers.

12. Government Requests

We disclose personal data to authorities only when legally required, and we challenge requests that we believe are overbroad.

13. Children

Slidin is not for anyone under 13, or under the minimum age required in their country to use Instagram, Facebook or our service. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

14. Cookies And Local Storage

Slidin uses only essential and preference cookies. We do not use advertising or analytics cookies.

• A session cookie that keeps you signed in. It ends when you close the browser, or lasts up to 30 days if you choose "remember me".
• A language-preference cookie (slidin_lang).
• A referral cookie (slidin_ref), set for up to 30 days only if you arrive through a referral link. It holds a referral code and no personal data.
• Short-lived security cookies set by the sign-in system while you sign in, including when you use Google sign-in.
• Your browser's local storage remembers your light or dark theme and brand selection on your device.

15. Compliance With Meta Platform Rules

Slidin complies with the Meta Platform Terms and the Instagram and Messenger messaging rules. In particular:

• We message people only in response to something they did: a comment on a post, or a message they sent. Messages respect Meta's 24-hour messaging window.
• We send one private reply per comment.
• When a person asks to stop (for example by replying STOP), we honor it and send them no further automated messages.
• Slidin does not send unsolicited bulk messages, and customers may not use it to do so.
• Platform Data is used only to provide the customer's own features, and is deleted as described in Section 9.

16. Changes To This Policy

We may update this policy. The date at the top shows when it last changed (October 16, 2026). For material changes we will notify account owners by email or inside Slidin.

17. Contact

Luxuria Technology Ltd., registered at RAK Free Zone (RAKEZ), Ras Al Khaimah, United Arab Emirates, operates Slidin. For privacy questions or data requests, email support@slidin.net or use the Data Deletion page.