Privacy Policy
SetFlow · Last updated October 21, 2026
Who we are
SetFlow is a messaging management tool operated by SocialFlow. It helps businesses manage and respond to conversations and comments on their own Instagram professional accounts, see how their content performs, and schedule appointments with people who message those accounts.
Data we collect
When a business connects its Instagram professional account, we receive and store, via Meta’s APIs: the connected account’s basic profile information and access token; direct messages sent to and from the connected account, including the sender’s username and profile information; and appointment details (such as name, email, and selected time) when someone books a call through a scheduling link.
If the business turns on comment automations, we also receive comments that people leave on the connected account’s posts and reels: the comment text, the comment ID, the ID of the post, and the commenter’s Instagram username and Instagram-scoped ID.
If the business uses content analytics, we also receive insights about the connected account and its content: account metrics such as reach, views, accounts engaged, interactions, follows and unfollows, and follower count; audience breakdowns by age, gender, country, city and active hours, which Instagram provides only as totals and not per person; and the account’s own posts, reels and stories with their captions, links, thumbnails and per-post metrics such as likes, comments, saves, shares, reach, views, profile visits and follows.
How we use data
We use this data solely to provide the service to the connected business: displaying its conversations, generating and sending replies on its behalf, and coordinating appointment scheduling. We use a comment only to check it against the rules the business set, to send that person the single private reply Instagram allows for a comment, and to post the public reply the business wrote under it. If the person answers, the conversation is handled like any other direct message under this policy. We use insights only to show the business how its own account and content perform.
We do not sell personal data or use it for advertising. We share it only with service providers that process it on our instructions to run the service: our hosting and database providers, the AI model provider that drafts replies, and the voice providers that convert voice messages to text and record voice replies. These are Vercel (hosting), Supabase (database), Anthropic (drafting replies), ElevenLabs and Fish Audio (converting voice messages to text and recording voice replies), and OpenAI Whisper (converting voice messages to text).
Data retention and deletion
Conversation and account data is retained while the related business account remains connected to the service. You can request deletion of your data at any time: if you messaged a business that uses this service, or you are a business using it, email us at the address below and we will delete the associated data within 30 days. Disconnecting an Instagram account from the service revokes its access token.
Comment and insights data follow the same rule: we keep them while the account stays connected and delete them with the rest of the account’s data on request.
Meta platform data
Our use of data received from Meta’s APIs complies with the Meta Platform Terms and Developer Policies, including applicable limitations on the use and transfer of that data.
Contact
For any privacy question or data deletion request, contact: mchobusiness@gmail.com