Who We Are
The operator of winksend is a registered partnership firm incorporated in India (GST: 08AALFT8672N1Z5), operating from Jaipur, Rajasthan. This firm is the data controller responsible for personal information collected through this service.
Information We Collect
We may collect information you provide directly, such as your name, email address, company name, billing details, support messages, and workspace settings.
We may also collect service data such as IP address, browser type, session activity, event logs, diagnostics, and account security records generated when you use winksend.
Instagram API Permissions We Use
When you connect your Instagram Business or Creator account, winksend requests the following permissions from Meta’s official Instagram API:
instagram_business_basic— used to read your Instagram account’s username, profile picture, and account ID so we can identify and display your connected account inside winksend.instagram_business_manage_comments— used to read comments on your posts and reels so we can detect trigger keywords you set, and to post a public reply to a comment when you configure that option in an automation.instagram_business_manage_messages— used to send a direct message to a person who triggered one of your automations, using the exact message content you have written inside winksend.
What We Do With Instagram Data
We use Instagram API data only to provide the features you have configured. We do not sell, rent, or share Instagram user data with any third party for advertising, profiling, or marketing purposes.
- Account identifiers and profile metadata are used only to display your connected account inside the app.
- Comment events are used only to detect whether a comment matches a trigger keyword in one of your active automations.
- Message sending is performed only when a trigger fires and only to the person who triggered it, using the message text you have set.
- Post and media identifiers are used only to bind an automation to a specific post you have selected.
- No Instagram message content from other users is stored beyond the event metadata needed to confirm delivery.
Meta and Instagram Data We May Access
If you connect Meta or Instagram features, winksend may access account identifiers, Instagram account identifiers, usernames, profile metadata, permissions granted to winksend, and access tokens needed to operate the connection.
Depending on the automations you enable, winksend may also access comment events, message delivery events, media or post identifiers, and related delivery metadata needed to run your automation workflows.
What We Store
We store the account information, workspace settings, automation configuration, connection records, and access tokens needed to keep your winksend account working.
We store automation execution logs including trigger type, timestamp, and delivery status so you can monitor your automations. We do not store the full content of messages received from Instagram users.
We may also store support history, billing records, and limited analytics needed to operate, troubleshoot, and secure the service.
What We Do Not Store
winksend does not ask for or store your Instagram password.
winksend does not use scraping tools, browser automation, or unofficial bots to collect Instagram or Facebook data.
winksend does not read or store the private messages sent by other users in your Instagram inbox beyond what is necessary to detect automation triggers.
winksend does not store more Meta or Instagram data than is reasonably needed to provide the workflows you enable.
Sharing of Information
We may share information with service providers who support hosting, infrastructure, analytics, payment processing, customer support, communications, and security operations. These providers are contractually required to protect the data and use it only to provide their services to us.
We do not sell personal information or Instagram data to third parties.
We may also disclose information when required by law, to protect rights or safety, to investigate abuse, or in connection with a merger, acquisition, financing, or sale of assets.
Meta Official APIs and Third-Party Platforms
winksend uses only official Meta APIs for all Instagram and Facebook connected functionality. We do not use unofficial APIs, browser automation, or scraping.
Your use of these integrations is also subject to Meta’s and Instagram’s own terms and privacy practices.
You can remove an Instagram connection inside winksend from Channels → Instagram. Choose Remove, read the warning, type REMOVE, then choose Remove account.
This stops replies and permanently removes that connection, its stored access token, and its winksend automation settings and history. It does not delete your Instagram profile or your full winksend account.
If you only want to pause replies, choose Disable on the same page. Disable keeps the connection and saved data so you can use Enable to resume later.
If winksend appears in your Facebook Business Integrations, you can also remove its access there. When we receive Meta’s removal or data-deletion notice, we stop replies for the affected connection and remove its stored access token. The related Instagram data is queued for deletion. Reconnecting before deletion cancels that pending request.
Data Deletion
To delete your winksend account, open Settings → Profile, find Delete account, and follow the confirmation steps. The final button is Schedule account deletion.
You are signed out immediately. Your account and the workspaces you own that are included in the request are scheduled for permanent deletion after 30 days.
Workspaces where you are only a team member stay available to the rest of that team. If you own a workspace with other members, resolve the workspace warning shown in the app before continuing.
Removing one Instagram connection or removing access through Meta does not delete your full winksend account.
To request full deletion of all data we hold about you, visit our Data Deletion page or email privacy@winksend.com. We will process your request within 30 days.
Data Retention
We retain personal information only for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain operational records.
Account and workspace data is generally retained while your account is active. When you request deletion, the account is scheduled for removal and deletion is completed within our stated window.
Operational logs, security records, billing records, and backup-related data may be retained for a limited period where reasonably necessary for fraud prevention, legal compliance, dispute handling, or system integrity.
Security
We use reasonable administrative, technical, and organizational measures to protect personal information. Access tokens for Instagram accounts are stored encrypted. However, no transmission method or storage system is completely secure, and we cannot guarantee absolute security.
Your Rights and Choices
Depending on your location, you may have rights to access, correct, update, export, restrict, or delete personal information, or to object to certain processing activities.
You can schedule deletion of your winksend account from Settings → Profile, or email privacy@winksend.com with a data deletion request if you no longer have account access.
You may also opt out of non-essential marketing communications by following the unsubscribe instructions in those messages.
Children and International Transfers
winksend is not directed to children under 13, and we do not knowingly collect personal information from children.
If information is transferred across borders, we take reasonable steps to protect it in a manner consistent with this Privacy Policy and applicable law.
Contact for Privacy Requests
For privacy requests, data deletion requests, or questions about Meta-connected data handling, email privacy@winksend.com.
winksend — Jaipur, Rajasthan, India · GST 08AALFT8672N1Z5
Changes to This Policy
We may revise this Privacy Policy from time to time. When we do, we will post the updated policy on this page and update the last-updated date. Continued use of winksend after the updated policy becomes effective means you accept the changes.