Now on Google Play · Get the app· iOS coming soon
Home / Privacy policy

Privacy policy

How likecmtshare collects, uses and protects your data, including data from Instagram and from the people who message you.

Last updated · 3 October 2026

Who we are

likecmtshare provides comment-to-DM automation for Instagram creators and businesses. likecmtshare is operated by:

  • Legal name: DALTRO INFOTECH LLP, a limited liability partnership registered in India (LLPIN ADB-9890)
  • Address: New Delhi, India

In this policy, "we", "us" and "our" mean that LLP. "You" means the person or business that creates a likecmtshare account. This policy covers our website, our web app and our connection to Instagram. It also explains how we handle data about people who comment on or message an Instagram account that uses likecmtshare.

We follow the Information Technology Act, 2000, the SPDI Rules, 2011, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 as their provisions come into force.

Our role

For your own account data (sign-up details, billing, support and use of our website), we decide why and how it is processed. We are the Data Fiduciary for it.

For data about your followers and leads (people who comment on your posts, reply to your stories or message your account), you decide which automations run, what they say and what you do with the leads. You are the Data Fiduciary for that data. We are your Data Processor and process it only to run the automations you set up.

This means you are responsible for having a lawful basis to collect and use your followers' data, and for telling them how you will use it. See your followers and leads.

What we collect

Information you give us

  • Name, email address, phone number and business type
  • Business name and GSTIN, if you want a GST invoice
  • Messages you send our support team

Payment information

  • Order and transaction IDs, payment status, plan and renewal dates, collected through our RBI-authorised payment partners
  • We never see or store your full card number, CVV or UPI PIN

Instagram data you authorise through Meta's official APIs

  • Your Instagram Professional (Business or Creator) account ID, username and profile picture
  • Access tokens that let us act on your account. We never ask for or store your Instagram password
  • Comments, story replies and messages received on the posts, reels and stories you choose to automate
  • The username, profile ID and other profile details Instagram shares with those events, and whether the person follows you (used for follow gates)
  • The replies and DMs sent by your automations

Leads and content

  • Details people choose to share in your automated conversations, such as their name, phone number or email address, plus the tags and notes you add to them
  • Your automations, message templates, links and the files you upload to send

Technical data

  • IP address, browser, device and operating system
  • Login records, feature usage, error reports and security logs
  • Cookies, as described in our cookie policy. Analytics cookies load only if you accept them

Please do not use automations to collect sensitive information such as health details, government ID numbers, bank details or passwords from your followers.

How we use it

  • Run the automations you set up: reply to comments, send DMs, check follow gates, deliver files and collect leads
  • Show you your leads and let you export them
  • Create and manage your account and subscription
  • Take payments, issue GST invoices and keep tax and accounting records
  • Provide support and send important service notices
  • Keep the service secure, and detect and stop spam, fraud and abuse
  • Comply with Meta's Platform Terms, the law and lawful requests from authorities
  • Improve the service using aggregated or de-identified usage data

What we never do: we do not sell personal data. We do not use Instagram data for advertising, and we do not combine data from different likecmtshare accounts to build profiles of people.

Your followers and leads

If you use likecmtshare to message people, you must:

  • Only message people who interacted with your account first, as Meta's rules require
  • Tell people what you will do with the details they share, for example in your bio, your link page or the DM itself
  • Use lead details only for the purpose people shared them for
  • Stop messaging and delete someone's details when they ask you to
  • Not upload or use personal data you are not legally entitled to use

We do not check each user's messages or lead lists. If a follower asks us about their data, we may pass the request to you or help you respond to it.

Who we share it with

  • Meta Platforms, to receive comment and message events and to send the replies and DMs you set up
  • Payment partners (RBI-authorised payment aggregators), to process payments and prevent payment fraud
  • Service providers such as cloud hosting, database, email, analytics and support tools, who process data only on our instructions and under confidentiality obligations
  • Professional advisers such as lawyers, accountants and auditors, where needed
  • Authorities, including courts, law enforcement, tax authorities and CERT-In, where the law requires it
  • A buyer or successor, if our business is merged, acquired or restructured, under the same protections as this policy

You can ask us for the current list of service providers at support@likecmtshare.com.

Where your data is stored

Our service providers and Meta may store or process data outside India. When data leaves India we follow Indian law, including any restrictions the Government notifies under the DPDP Act, and we use providers with appropriate security safeguards.

Data retention

  • Account data: kept while your account is active, and deleted within 30 days of account closure
  • Instagram access tokens: we stop using them as soon as you disconnect or remove the app, and delete them within 30 days
  • Comment and message event logs: kept for up to 180 days to run and troubleshoot your automations, then deleted or anonymised
  • Leads, automations and uploaded files: kept until you delete them or close your account, then deleted within 30 days
  • Security and system logs: kept for 180 days, as CERT-In directions require
  • Billing, invoice and tax records: kept for as long as GST and tax laws require, currently up to 8 years
  • Backups: deleted data is removed from backups in our normal backup cycle

We do not keep personal data longer than we need it.

Deleting your data

You can delete your data at any time. Remove likecmtshare from your Instagram settings, delete your account in the app, or email support@likecmtshare.com. Step-by-step instructions are on our data deletion page.

If you messaged or commented on an account that uses likecmtshare and want your details removed, email us with that account's username and yours.

Security

  • Data is encrypted in transit using TLS
  • Instagram access tokens and other sensitive data are encrypted at rest
  • Access to production systems is limited to people who need it, with role-based permissions
  • We log and monitor access, patch our systems and have an incident response process

No online service is completely secure. Keep your login details private and tell us straight away at support@likecmtshare.com if you think your account has been accessed without permission.

Data breaches

If a personal data breach affects you, we will tell you without delay: what happened, what data was involved, what we are doing about it and what you can do. We will also report it to the Data Protection Board of India and CERT-In within the timelines the law sets.

Your rights

Under the DPDP Act and other applicable laws, you can:

  • Get a summary of the personal data we hold about you and who we have shared it with
  • Correct, complete or update your data
  • Erase your data, unless we must keep it by law
  • Export your leads from the app
  • Withdraw your consent
  • Raise a grievance with us
  • Nominate someone to exercise these rights if you die or become unable to

Email support@likecmtshare.com from your account email. We may ask you to verify your identity. We reply within 30 days.

Children

likecmtshare accounts are only for people aged 18 or over, and we do not knowingly collect data from children to create accounts.

Instagram allows people from age 13, so some people who comment on or message your account may be under 18. likecmtshare is not designed to target children, and you must not use it to send children age-inappropriate content or promote adult or restricted products to them. If we learn that we are processing a child's data in a way the law does not allow, we will delete it.

Cookies

We use essential cookies to keep you signed in and remember your choices. We use Google Analytics only if you accept it on the cookie banner. We do not use advertising cookies. Details are in our cookie policy.

Third-party platforms

likecmtshare connects to Instagram and uses payment and hosting providers that have their own privacy policies. Please review Meta's privacy policy and the permissions you grant before connecting your account. We are not responsible for how independent third parties handle data.

Grievance officer

For privacy complaints or concerns about how we handle data, contact our Grievance Officer:

We acknowledge complaints within 24 hours and resolve them within 15 days of receipt, or sooner where the law sets a shorter timeline. Please include your name, your Instagram username or account email, and enough detail for us to look into the issue.

If you are not satisfied with our response, you can complain to the Data Protection Board of India once the relevant provisions of the DPDP Act are in force.

Changes to this policy

We may update this policy as the service or the law changes. For material changes we will tell you by email or in the app before they take effect. The "Last updated" date at the top always shows the current version.

Questions?

Email support@likecmtshare.com. We usually reply within one business day.