Privacy Policy

Last updated: 14 October 2026

This policy explains how Gengar Labs (“we”, “us”) handles information when you use the app. Gengar Labs lets you create keyword automations that reply to comments and send direct messages on an Instagram account you connect.

Information we keep to run the service

We store only what is needed to create your account and run the automations you set up:

• Account details you provide, such as your name, email address, phone number, and a password hash if you sign up with email.
• Google account identifiers and a profile image if you choose Google sign-in.
• The Instagram professional account and Facebook Page you connect, including the access token Meta provides. The token is stored so Gengar Labs can send the replies you configure. It is not used for anything else.
• Automations you create, including keywords, comment replies, direct messages, and uploaded card or image files used in those messages.
• Contacts you add, or Instagram usernames collected from comments that match an automation you turned on. A contact may also include a name, email, or phone number if you enter one.
• Short-lived identifiers Meta sends with a comment or message, used only to finish that automation (for example, sending the one private reply Instagram allows).
• Usage counts, such as how many direct messages were sent in the current period, so plan limits can be applied.

What we do not do with your data

• We do not sell your personal data, your contacts, or your Instagram content.
• We do not use your data, your audience, or message content for marketing, advertising, or to build advertising profiles.
• We do not share your data with advertisers or data brokers.
• We do not use your data to contact people for our own promotions.

Information is used to provide Gengar Labs, keep the service secure, enforce plan limits, and respond if you contact us.

Instagram and Meta

When you connect Instagram, Gengar Labs receives the information Meta shares under the permissions you approve, such as your professional account, Page, comments, and messages needed for the automations you enable. Gengar Labs acts on that information only to carry out the rules you saved. Disconnecting Instagram stops new automations from sending. You can also ask us to delete the connection and related data, as described on the data deletion page.

Who else may process data

Hosting and infrastructure providers process data only so the app can run. Google processes a sign-in if you use that option. Meta processes Instagram activity under its own terms when you connect an account. We do not give these parties permission to use your Gengar Labs data for their marketing.

How long we keep data

We keep account, automation, and contact data while your account is open and you are using Gengar Labs. When you delete your account, or when we complete a deletion request, we delete that data from our active systems. We may keep a limited record if the law requires it, such as a record that a deletion request was completed.

Your choices

You can update account details in the app, turn automations off, delete automations and contacts, and disconnect Instagram. An in-app option to delete your account and associated data is planned. Until that control is available, use the steps on the data deletion page and we will delete the account and data for you.

Security

We use access controls and encrypt the Instagram access token at rest. No method of storage or transmission is perfectly secure, and we work to protect the data we hold.

Children

Gengar Labs is not directed at children under 13, and we do not knowingly collect their personal information.

Changes

If this policy changes, we will update the date above and post the new version on this page.

Contact

Questions about this policy: info@gengarlabs.com.