Privacy Policy

Scope and controller

SarApply is a travel and immigration business. This policy explains how SarApply processes information when people contact us through comments or direct messages on our Instagram account, including when our Instagram assistant handles the interaction. Questions and privacy requests may be sent to contact@nimasarang.com.

Information we process

When a person interacts with SarApply on Instagram, Meta may send us account and event identifiers, username or profile information available through the Instagram API, comment or direct-message text, media and conversation identifiers, timestamps, and delivery metadata. We also record limited technical results needed to prevent duplicate replies and diagnose failures. We never ask for or receive a person's Instagram password.

How we use information

We use this information to understand and respond to enquiries about SarApply and its travel and immigration services, provide configured comment or message responses, follow Instagram's reply windows, prevent duplicate actions, secure the service, and troubleshoot delivery failures. The assistant does not make decisions about a person's immigration eligibility or application. We do not sell personal information, build advertising profiles, or send bulk or unsolicited messages.

Sharing and service providers

Information is exchanged with Meta and Instagram to provide these communications and is processed on restricted hosting infrastructure used to run SarApply. We do not share it with independent advertisers or data brokers. We may disclose information when required by law or necessary to protect SarApply and its users.

Retention and deletion

Content-bearing webhook and action records are kept only as long as needed to process and verify the interaction, normally no longer than 30 days. Sanitized security and reliability records may be retained for up to 90 days. Information is deleted sooner when the connected business disconnects the app or a valid deletion request is completed, unless limited retention is required by law or to investigate abuse. See the data-deletion instructions.

Security

We use HTTPS, authenticated webhook signatures, access controls, restricted secret handling, bounded processing, and privacy-reduced logs. No internet service can guarantee absolute security.

Your choices and rights

You may stop interacting with the connected account, delete your Instagram comment or message where Instagram provides that control, or request access, correction, or deletion by contacting us. We may ask for enough information to verify that the request concerns you without asking for message content or a password.

Children and international processing

SarApply's Instagram assistant is not directed to children. Information may be processed where our hosting providers operate, subject to the safeguards described in this policy.

Changes

We may update this policy when the service or legal requirements change. The effective date above identifies the current version.