Privacy policy
Last updated 28 October 2026
Creator Inbox is run by Pasalify pvt. ltd. (“we”). It helps creators read and answer messages and comments from Instagram and Facebook in one place, and automate replies. This policy explains what we collect, why, and the choices you have.
Who this covers
Creators are people who sign up and connect their accounts. Fans are people who message or comment on a creator’s connected account. For fans’ data we act on the creator’s behalf: the creator decides how it is used, and we process it only to provide Creator Inbox to them.
What we collect
- Your account: your email address, and your name and photo if you sign in with Google.
- Connected accounts: the Facebook Pages and Instagram professional accounts you connect, their names and ids, and access tokens Meta issues for them. Tokens are encrypted before we store them.
- Messages and comments: direct messages, comments, story replies and mentions sent to your connected accounts, your replies, and the fan’s public name or username.
- What your automations collect: answers fans give to questions you set up (for example an email address or phone number), tags you apply, and how often links in your messages are clicked.
- Technical data: a session cookie that keeps you signed in, and server logs kept for security and debugging.
How we use it
Only to provide and secure the service: showing your inbox, sending the replies and automated messages you set up, counting results for your automations, and keeping your account safe. We do not sell personal data, use it for advertising, or share it with data brokers.
Meta platform data
We access Instagram and Facebook data through Meta’s official APIs, only with the permissions you grant when you connect, and only for the features above. We follow Meta’s Platform Terms and Developer Policies. You can remove our access at any time by disconnecting an account in Creator Inbox, or in your Facebook settings under Business Integrations.
Who we share it with
Service providers that run the service for us, under contracts that limit them to that purpose:
- Meta, to receive and send messages and comments on your connected accounts;
- our hosting, scheduling and database providers (Vercel, Cloudflare, Neon);
- our email provider (Resend), to send sign-in links.
We may also disclose data if the law requires it.
How long we keep it
- Messages, comments and fan details: while the account stays connected.
- After you disconnect an account: its access token is deleted at once, and its messages, comments and fan data within 30 days.
- Raw notifications received from Meta: 14 days.
- When you ask for deletion (see below): right away.
Your choices and rights
You can see and export what we hold about you, correct it, or have it deleted. Fans can ask the creator they wrote to, or contact us and we will pass the request on. To delete your data, follow our data deletion instructions or email support@pasalify.com.
Security
Data travels over encrypted connections, access tokens are encrypted at rest, and each workspace’s data is isolated from every other workspace’s in the database.
Children
Creator Inbox is not meant for anyone under 16, and we do not knowingly collect data from them.
Changes
If this policy changes in a meaningful way, we will tell you by email or in the app before it takes effect.
Contact
Pasalify pvt. ltd. · support@pasalify.com