Privacy Policy
Effective 18 September 2026
Uno Answers (“Uno Answers”, “we”, “us”) is operated by Terbium Solutions. This policy explains what personal data we process when brands use Uno Answers to run Instagram influencer campaigns, and when Instagram users interact with those campaigns.
1. Who this policy covers
- Brands (our customers): companies that use Uno Answers to run campaigns.
- Influencers: creators who connect their Instagram professional account to a brand's campaign.
- Instagram users: people who comment on a campaign post or send a direct message to a connected account.
- Website visitors to unoanswers.com.
2. Data we collect
From Instagram, through Meta's official APIs
- For people who comment on a campaign post or reply to a campaign message: we receive the comment or message from Meta in order to act on it, but we do not store it. We keep only a salted one-way hash of the person's Instagram-scoped ID — enough to avoid messaging the same person twice, and not enough to identify them.
- Which campaign keyword matched, whether a message was delivered, and whether a tracked link was clicked. Message text, usernames and Instagram user IDs are not written to our database.
- For connected influencer accounts: the Instagram account ID, the username, and the access token Meta issues when the influencer authorises the app. Tokens are encrypted, bound to the account they belong to, and deleted the moment that influencer disconnects or is revoked.
We only receive data for accounts that have authorised the Uno Answers app, and only for the webhook fields they enabled (comments, live comments and messages). We do not collect passwords.
From brands
- Company name, contact email and a short name, provided at onboarding.
- Campaign configuration: keywords, the messages the brand writes, the influencer handles allowed to join, and the campaign's landing page.
Automatically
- Technical logs (IP address, request time, browser user agent) used for security and debugging.
- Link clicks on tracked campaign links (UTM parameters), used for campaign analytics.
3. How we use data
- To detect campaign keywords in comments and send the brand's automated welcome and follow-up direct messages.
- To show the brand how its campaign is performing, as counts and outcomes.
- To keep each influencer's account inside Instagram's sending limits.
- To keep the service secure, prevent abuse and fix problems.
We do not sell personal data, and we do not use it for advertising profiles.
4. Legal basis
For Instagram users, the brand running the campaign is the data controller and we process data on its behalf as a processor. For data about our own customers and website visitors, we rely on performance of a contract and our legitimate interests in operating and securing the service.
5. Sharing
- The brand running the campaign sees counts and outcomes for its own campaigns only — never the text of a comment or message, and never a commenter's username. Each brand's data is kept separate.
- Meta Platforms, to send messages through the Instagram API.
- Service providers who host the service under data processing terms: Vercel (hosting) and Supabase (database).
- Authorities, where required by law.
6. Retention
- Webhook event records (metadata and outcome only, no message content) are deleted automatically after 30 days; internal delivery records after 7 days.
- Campaign data is kept for as long as the brand's account is active, or until deletion is requested.
- Access tokens are deleted when the influencer disconnects, when the brand revokes them, or when the account owner removes the app from their Instagram settings.
7. Security
Data is encrypted in transit (HTTPS). Access tokens and secrets are encrypted at rest with AES-256-GCM. Requests from Meta are verified by signature, and database access is limited to our servers.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to or restrict its processing. See how to delete your data, or contact us at hello@unoanswers.com. If you interacted with a brand's campaign, you can also contact that brand directly. You may lodge a complaint with your local data protection authority.
9. International transfers
Our providers may process data outside your country. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses.
10. Children
Uno Answers is not directed at children under 13 (or the minimum age required in your country to use Instagram).
11. Changes
We will post updates on this page and change the effective date. Material changes will be notified to brands by email.
12. Contact
Terbium Solutions, Uno Answers: hello@unoanswers.com