This Privacy Policy explains how ForushAI ("ForushAI", "we", "us") collects, uses, stores, shares, and deletes information when you use forushai.ir and the ForushAI dashboard (the "Service"), including information received through the Instagram API provided by Meta Platforms, Inc. ("Meta").
ForushAI is an independent product built and operated by an independent developer ("Hamed Dev"). ForushAI uses Meta's APIs to provide Instagram integration features. ForushAI is not affiliated with, endorsed by, or sponsored by Meta or Instagram.
1. Who this policy applies to
This policy applies to (a) visitors of forushai.ir, (b) registered ForushAI account holders, and (c) the connected Instagram Professional/Business account of a ForushAI customer and the people who message or comment on that account.
2. Information we collect
2.1 Account information you provide
- Username, phone number, and password (stored as a hash, not in plain text)
- One-time verification codes (OTP) sent to your phone during login
- Any information you enter into the ForushAI dashboard (e.g. automated-reply rules, product information, keywords)
2.2 Information received through the Instagram API
When you authorize ForushAI to connect to your Instagram Professional/Business account, Instagram/Meta may send us the following, depending on the permissions you grant:
- Your Instagram business account identifier and username
- An access token that lets ForushAI act on your behalf, which we store encrypted
- Direct message events and comment events sent to your connected account (sender identifier, timestamp, whether the message came in or was sent out, and — for comments — the comment ID and the ID of the post it belongs to)
We intentionally do not store the text content of Instagram direct messages in our database. Message text is processed in memory to match your automation rules and to deliver a reply, and only non-content metadata (who, when, which conversation, direct message or comment) is saved, so that we can show you a conversation list, count messages, and measure response times. Comment text needed to generate a reply is processed at the time the comment is handled and is not retained beyond what is required to do so.
2.3 Technical information
- IP address, browser type, and basic request logs, used for security, abuse prevention, and troubleshooting
3. How we use information
- To operate your ForushAI account and authenticate you (including OTP login)
- To receive and display Instagram direct messages and comments sent to your connected account
- To send replies that you configure or trigger through the Service, including keyword-based automated replies to messages, comments, and story replies
- To let you hand a conversation off to a human operator on your team
- To show you conversation history, response-time statistics, and other dashboard analytics for your own account
- To maintain the security, integrity, and reliability of the Service and to prevent abuse
- To communicate with you about your account (e.g. verification codes, service notices)
We use data received from the Instagram API only to provide the Service to the business that connected the account. We do not sell Instagram data, and we do not use it for advertising unrelated to the Service.
4. AI-assisted features
ForushAI's current automated replies (for direct messages, comments, and story replies) are generated using rules and keywords that you configure — for example, replying with a chosen message when a customer's comment contains a specific word. ForushAI is also developing AI-assisted conversation features. Where an AI-assisted feature is enabled on your account, relevant conversation content may be processed by a third-party AI infrastructure provider in order to generate a suggested or automatic response. We will name the specific AI provider(s) used in this section once such a feature is live for your account, and we will not silently change this without updating this policy. Please avoid sending highly sensitive information (such as national ID numbers, payment card details, or health information) through automated conversations.
5. Data storage and security
Data is stored in a MongoDB database operated by our cloud infrastructure providers. Instagram access tokens are encrypted at rest. Access to production data is limited to the people who operate the Service. No method of transmission or storage is 100% secure, but we take reasonable technical and organizational measures to protect your information.
6. Data retention
- Instagram account connection data (business account ID, username, encrypted access token) is kept for as long as the Instagram integration remains connected, so that the Service can keep working, plus a limited period afterward for security and dispute-resolution purposes.
- Message/comment metadata (as described in 2.2) is kept for as long as your ForushAI account is active, so you can see your conversation history and statistics.
- Message/comment text content is not stored in our database (see 2.2).
- When you disconnect Instagram or delete your ForushAI account (see Section 8), the data described above is deleted, other than information we are legally required to keep for a limited time (e.g. security or fraud-prevention logs).
7. Sharing information
We do not sell your information. We share information only with:
- Infrastructure providers that host our servers and database, strictly to operate the Service
- Third-party AI infrastructure providers, but only for accounts where AI-assisted features are enabled (see Section 4)
- Authorities, if legally required to comply with a valid legal request
- Anyone else, only with your explicit consent
8. Data deletion and disconnecting Instagram
You can disconnect your Instagram account from ForushAI at any time, either from the ForushAI dashboard or from your Instagram/Meta account's connected-apps settings. You can also request deletion of your ForushAI account and associated data. See our Data Deletion page for the full process.
9. Your rights
- Request a copy of the information we hold about you
- Ask us to correct inaccurate information
- Ask us to delete your account and associated data
- Disconnect your Instagram integration at any time
To exercise any of these rights, contact us using the details in Section 13.
10. Cookies and analytics
We use essential cookies to keep you signed in (session cookies) and basic, privacy-conscious analytics to understand how our public website is used. We do not use these cookies to track you across other websites.
11. Children's privacy
The Service is intended for business owners and is not directed at children. We do not knowingly collect information from children under the age required by Instagram/Meta to hold a Professional or Business account.
12. Changes to this policy
We may update this Privacy Policy from time to time. If we make a material change, we will update the "last updated" date at the top of this page and, where appropriate, notify account holders.
13. Contact us
- Email: hello@forushai.ir
- Telegram: @hamed_ddev
- Website: forushai.ir
