Privacy Policy

Chropton (https://www.chropton.com) is an Instagram automation tool operated by Lunar Global Technologies(“we” or “us”). Chropton helps creators and influencers auto-reply to comments, turn keyword comments into direct messages, and track engagement on their own Instagram professional (Business or Creator) account. This policy covers the Chropton website and dashboard, and how we handle data obtained through Instagram’s API when you connect your account.

Chropton is an independent, third-party application. It is not created by, affiliated with, or endorsed by Meta Platforms, Inc. or Instagram in any way.

Account information you give us directly: your name, email address, and password when you sign up; a one-time code sent to your email to verify signup or reset your password; your light/dark theme preference; and anything you submit through our Contact form (name, email, subject, message).

Information from your connected Instagram account, obtained through Instagram’s official API only after you explicitly approve the permissions listed in Section 3 during Instagram’s own login screen. This includes your profile details, posts/reels and their engagement numbers, active stories, comments on your content (including the commenter’s Instagram username/ID and comment text), and the access token Instagram issues us to act on your behalf. We also keep a permanent local copy of each post’s thumbnail image, since Instagram’s own image links expire after a period of time.

Content you configure inside Chropton: your default auto-reply message, per-post auto-reply text and AI instructions, and any keyword-to-DM rules you set up, plus the replies Chropton sends out under those rules.

Billing information: your subscription plan, status, and usage (how many automated replies/DMs you’ve sent this billing period). Payments are processed by Razorpay — Chropton does not receive or store your card number or other full payment details.

Usage and log data: standard technical logs (e.g. request/error logs) generated by operating the service.

When you click “Connect Instagram,” you’re taken to Instagram’s own login screen, where Instagram tells you exactly which permissions Chropton is asking for and lets you approve or decline. We only ever request the following, and only use each one for what’s described here:

• instagram_business_basic — Reads your connected Instagram professional account’s basic profile (ID, username, name, account type, profile picture, bio, website) and follower/following/media counts, plus your posts, reels, and active stories, so we can display your profile and content inside the Chropton dashboard.
• instagram_business_manage_comments — Reads comments on your posts and reels and posts replies on your behalf — this is what powers automatic and AI-generated comment replies.
• instagram_business_manage_messages — Sends direct messages on your behalf — specifically, Instagram "Private Replies" and button-template messages triggered when a comment matches a keyword rule you configure.
• instagram_business_manage_insights — Reads aggregate performance metrics (currently, view counts) for your posts, so we can show engagement stats on your dashboard.

We only request the minimum permissions needed for the features above, only act on your Instagram account when you’ve configured a rule that says to, and never use data obtained through Instagram’s API for any purpose beyond providing you the Chropton features you’ve turned on.

If you turn on AI replies for a post, the relevant comment thread text (and your own custom instructions for that post) is sent to OpenAI’s API to generate a reply. This is sent to OpenAI’s business API platform, not the consumer ChatGPT product, and — per OpenAI’s API data usage policy — is not used by OpenAI to train its models. We use it solely to generate the reply text sent back to your Instagram account. We keep an internal record of how many tokens each AI reply used, for our own cost tracking; this is never shown to other users or shared outside Chropton.

We do not sell your personal data. We share information only with:

• Meta/Instagram — every action Chropton takes on your behalf (replying to a comment, sending a DM) is a direct API call to Instagram, using your own connected account.
• OpenAI — comment text, solely to generate AI replies you’ve enabled (see Section 4).
• Razorpay — to process subscription payments.
• Resend — to deliver transactional emails (signup/reset codes).
• Service providers who host our infrastructure, under obligations to protect it.
• Law enforcement or regulators, only where legally required.

We keep your Instagram data for as long as your account stays connected, so the dashboard and automation rules keep working. If you disconnect your Instagram account or delete your Chropton account, we stop making any further API calls on your behalf and delete the associated data as described in our Data Deletion Instructions. Billing records may be kept longer where we’re required to for accounting or legal reasons.

You can revoke Chropton’s access to your Instagram account at any time from Instagram’s own app settings (Settings → Apps and Websites → Chropton → Remove), independent of anything on our side. You can also ask us to access, correct, export, or delete the personal data we hold about you — see our Data Deletion Instructions for exactly how, or just email us at info@lunarglobaltechnologies.com.

We use reasonable technical and organizational measures to protect your data, including restricting who can access production systems. No method of storage or transmission is completely secure, and we can’t guarantee absolute security.

Chropton is not directed at, and not knowingly used by, anyone under 13. Instagram itself requires account holders to meet its own minimum age. If you believe a child has provided us data, contact us and we’ll delete it.

We may update this policy as Chropton changes. Material changes will be reflected by updating the effective date above; continued use of Chropton after an update means you accept the revised policy.

Questions about this policy or your data? Email info@lunarglobaltechnologies.com or use our Contact page.