Privacy Policy

What we collect

Your account data (email, name, password hash — we never store plain passwords), connected Instagram account details and access tokens, and your chat messages with the assistant. If you sign in with Google, we receive your email and name from Google.

Instagram data

The public checker reads public profile data. When you connect a professional Instagram account, you approve access to insights, publishing, comments and messages on Instagram's own sign-in page. Zorly stores the access token, never your Instagram password. You can disconnect the account at any time.

Third-party services

Public Instagram data is fetched through Meta Graph API or HikerAPI. Connected account features use the official Instagram API. Assistant replies are generated by configured AI providers; your project context and messages are sent to the active provider to produce a reply. The provider never receives your Zorly password.

Cookies

We use a session cookie to keep you signed in and a language cookie to remember your language. No advertising trackers.

We use a first-party cookie for 30-day campaign, promo and referral attribution. We record feature outcomes, estimated active time, provider-reported AI usage and payment/refund facts to understand service use. Raw usage is retained for 90 days and daily aggregates for 12 months. Account deletion removes personal usage data and detaches the account from promotion and financial records. Analytics does not contain raw chat messages, passwords or provider tokens.

Deletion

Delete your account any time in Settings — it removes your account, projects and chat history. Questions: hello@zorly.uz.