Who we are
Zingbizz Leads (“the Service”, available at iglead.zingbizz.in) is operated by Zingbizz, based in India (“we”, “us”). Businesses use the Service to connect their Instagram professional account, reply automatically to direct messages and comments, and collect the details people choose to share as leads.
This policy covers two groups of people: the businesses and their team members who sign in to the Service (“customers”), and the people who send a direct message to, or comment on a post of, a customer’s connected Instagram account (“Instagram users”). For Instagram users’ data, the customer decides what to ask for and we process it on the customer’s behalf.
Information we collect
From customers
- Email address and password. Passwords are never stored in plain text.
- Workspace details: workspace name, timezone, default reply and team membership.
- What you build in the Service: forms and their questions, FAQs, canned replies, keyword triggers and comment automations.
- API keys you create. The full key is shown to you once; we keep only enough of it to recognise it in a list.
From a connected Instagram professional account
When a customer clicks “Connect Instagram” and approves access through Instagram’s own login screen, we receive and store:
- The account’s Instagram user ID, username, name and profile picture URL.
- An access token and its expiry date, stored in encrypted form.
- When you set up a comment automation for specific posts, we read the list of your posts and reels (caption, image or thumbnail, link and date) to show them to you. We store only the IDs of the posts you select.
From Instagram users
When someone messages or comments on a connected account, Instagram sends us that event. We store:
- Their Instagram-scoped user ID, and their username and name where Instagram provides it.
- The text of direct messages exchanged with the connected account, including the automated replies the Service sends.
- For comments: the comment ID, the post it was left on and the comment text, so the matching automation can reply once.
- Answers given to the customer’s form questions, which can include a name, email address, phone number or other details the customer asks for.
- The original event records Instagram sends us, used to process and troubleshoot replies.
Cookies and technical data
We use only the cookies needed to keep you signed in. We do not use advertising or analytics trackers. Our hosting providers keep standard request logs (such as IP address, browser type and time of request) for security and reliability.
How we use information
- To provide the Service: send the replies, public comment replies and private replies a customer has configured, run their forms and FAQs, and show the resulting leads and message analytics to that customer.
- To let customers export their leads (CSV download) or read them through the Service’s API with their own API key.
- To keep the Instagram connection working, including refreshing access tokens before they expire.
- To secure the Service, prevent abuse, and answer support requests.
How we use data from Instagram
Data we receive through the Instagram Platform is used only to provide the features described above to the customer who connected the account, and in line with Meta’s Platform Terms and Developer Policies. In particular, we do not:
- sell, rent or license Instagram data to anyone;
- use it for advertising, or share it with advertising networks or data brokers;
- use it to build profiles of Instagram users, or for surveillance;
- show one customer’s data to another customer.
Each workspace’s data is isolated at the database level, so a customer can only see data from their own connected account.
Who we share it with
We share data only with the service providers that run the Service:
- Vercel Inc., which hosts and serves the web application.
- Hostinger, which hosts the server our database runs on, in India.
- Meta Platforms, Inc., through the Instagram API, to receive messages and comments and to deliver the customer’s replies.
We may also disclose information when the law requires it. Customers can export or send their own leads to other tools; those transfers are the customer’s choice and responsibility.
Where data is stored and how it is protected
Our database is hosted in India. Web requests are handled by Vercel’s network, which can process them in other countries. All traffic uses HTTPS, Instagram access tokens are stored in encrypted form, passwords and API keys are never stored in plain text, and access to each workspace is restricted to its members.
How long we keep it
- Customer account and workspace data: while the account is active.
- Contacts, messages, leads and event records: until the customer asks us to delete them, the workspace is closed, or we receive a data deletion request for the connected Instagram account.
- If a customer removes the Service’s access from Instagram, we stop using the connection immediately; its data is kept until deletion is requested as described below.
How to delete your data
If you connected an Instagram account
- In Instagram, open Settings, then Website permissions, then Apps and websites.
- Find Zingbizz Leads under Active and choose Remove.
- Meta then sends us a deletion request. We delete the Instagram connection and its access token, the comment automations attached to it, and every contact, message, lead and event record collected through it. You receive a confirmation code you can use to check the request.
You can also email zingbizzofficial@gmail.com from the address on your account to have your whole workspace deleted.
If you messaged or commented on a business that uses Zingbizz Leads
Ask that business to delete your details, or email zingbizzofficial@gmail.com with your Instagram username and the business’s account name, and we will delete them within 30 days.
Your rights
You can ask to access, correct or delete your personal data, or withdraw consent you gave, including under India’s Digital Personal Data Protection Act, 2023. Email zingbizzofficial@gmail.com; we reply within 30 days. This address also handles grievances.
Children
The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect data from children for our own purposes.
Changes to this policy
If we change this policy, we will update the date at the top of this page and, for significant changes, tell customers by email or in the Service.
Contact
Zingbizz, India. Email: zingbizzofficial@gmail.com