Last updated: October 7, 2026
1. Introduction
FBReply.com is operated by Randy Overstreet DBA Reaching More in the United States. We are the controller of information processed through this service. This policy explains how we handle information when you create an FBReply account and connect Facebook Pages or linked Instagram professional accounts. Contact us at support@fbreply.com with privacy questions.
2. Data Collection and Usage
We store your FBReply account name, email address, password hash, and authentication information. When you connect a Facebook Page or Instagram professional account, we store its account ID, name or username, connection status, and an encrypted access token. We receive comment and message events from Meta, including event, sender, post and comment identifiers and the text needed to match your saved rules. We store webhook events, reply jobs, your keyword rules and answers, and delivery or error logs so you can use and troubleshoot your automatic replies.
We use this information to authenticate you, connect your authorized accounts, receive events, match keyword rules, send the answers you configure, and show reply activity. We send the relevant reply content and identifiers to Meta to deliver Facebook and Instagram replies. We do not sell Platform Data or use it for unsolicited campaigns.
Hostinger provides our application hosting and database infrastructure and processes this information on our behalf. Access tokens are encrypted with AES-256-GCM before storage. Passwords are stored as hashes. Authorized support and administration may access service data to operate the app, resolve errors and handle deletion requests.
When you purchase a paid plan, Stripe processes your payment information through its hosted checkout and billing portal. We send Stripe your account name and email and an internal account identifier. We store Stripe customer and subscription identifiers, subscription status, and paid-plan dates to manage your access. We do not store full card numbers. Monthly reply counters are retained independently of the visible activity log to enforce your plan allowance.
3. Data Deletion Instructions
To stop automation for a connected account, sign in to FBReply, open My accounts, and choose Disconnect. This removes the usable access token from our database and attempts to unsubscribe the account from webhooks. If Meta cannot complete that unsubscribe, the app displays a warning. Disconnecting does not delete your FBReply account, saved rules or existing event and reply history.
To request deletion of your FBReply account and its associated data, or data associated with a connected Facebook or Instagram account, email support@fbreply.com with the subject "FBReply data deletion". Include your FBReply account email and the connected Page name or Instagram username, and say whether you want to delete the entire account or only the specified connection and its data. Do not send your password or access token. If you interacted with a business using FBReply, identify that business and the interaction so we can locate your data.
We process deletion requests within 24 hours and reply to confirm completion or explain any information needed to verify and locate the request. Deletion removes the requested data held by FBReply, including applicable connection records and tokens, rules, stored webhook events, reply jobs and logs. It does not remove comments or messages already delivered on Facebook or Instagram; manage those through Meta. We retain service data while your account is in use until it is cleared or deleted. Archive logs hides logs from the activity list; Clear logs removes reply logs, but does not delete the underlying webhook events or your account.
4. Terms of Service
Use FBReply in accordance with our Terms of Service and Meta Platform Policies. Configure appropriate answers and respect Facebook and Instagram messaging and content rules.
5. Cookies
We use essential cookies for authentication, login sessions, and connection security. These cookies can contain session identifiers or authentication information needed to recognize your account.