

Privacy policy
Last updated October 18, 2026
Dmora is a service operated by OXEDGEN that sends automatic replies to comments and direct messages and schedules posts on Instagram professional accounts that our customers connect. This policy explains what data Dmora handles and why.
Data we collect
- Account data: your name, email address and password (stored as a secure hash by our authentication provider).
- Connected account data: when you connect an Instagram professional account through Instagram’s official login, we receive your account ID, username, name, profile picture and an access token. Tokens are encrypted before storage.
- Interaction data: when someone comments on your posts or messages your account, Instagram sends Dmora the comment or message text, the sender’s Instagram-scoped ID and username, and the related post ID. We use it only to decide whether one of your automations should reply, and to show you a log of those replies.
- Content you create in Dmora: automation settings, message templates, and posts and media you schedule.
How we use data
- To send the automatic replies and publish the posts you set up, on your instruction.
- To show you activity logs and statistics about your automations.
- To keep the service secure and working, including detecting errors and abuse.
We do not sell personal data, use it for advertising, or share it with third parties except the providers that run the service.
Service providers
Dmora runs on Vercel (hosting), Supabase (database, authentication and file storage, hosted in the European Union) and Brevo (account emails such as sign-up confirmations). Replies and posts are delivered through Meta’s official Instagram API.
Retention
- Raw notifications received from Instagram are deleted after 7 days.
- Reply logs are kept while your workspace exists so you can review your automations’ history.
- When you disconnect a social account, its access token and automations are deleted immediately.
- When you delete your Dmora account, all of its data is deleted within 30 days.
Your rights
You can access, correct, export or delete your data at any time. See our data deletion instructions or email issam@oxedgen.com.
Contact
Questions about this policy: issam@oxedgen.com.