Privacy Policy
Last updated: October 23, 2026
- Dingmate answers Instagram comments and DMs for the businesses and creators who sign up with us ("owners").
- We only use information to provide that service. We don't sell it, and we don't use it for advertising.
- Owners connect through Instagram's own login. We never see Instagram passwords, and access tokens are stored encrypted.
- Messages from the people who write to an owner are kept for up to 90 days, then deleted.
- Anyone can ask us to delete their information: here's how.
- Who we are
- Information about owners
- Information about people who message owners
- How we use information
- How the AI works
- Who we share it with
- How long we keep it
- Security
- Your choices and rights
- Children
- Changes and contact
1. Who we are
Dingmate is a service of Mystic Pulse Capital LLC, a Virginia limited liability company based in Falls Church, Virginia ("we", "us"). This policy covers our website dingmate.com, our app (app.dingmate.com, formerly app.mysticpulse.ai), and the replies we send on Instagram for owners. Questions: support@dingmate.com.
2. Information about owners
When a business or creator signs up, we collect:
- Contact and account details: name, business or creator name, what they do, email address and mobile number.
- Their Instagram connection: through Instagram's login, the owner allows us to read and reply to their comments and messages. We receive an access token (stored encrypted), their Instagram account ID, username, display name, profile picture link, account type and follower count. We do not receive their password, and we never ask to post on their behalf.
- What they tell their assistant: prices, services, products, links, discount codes, hours, policies, questions and answers, tone and language preferences, and which topics should be passed to them.
- Photos, screenshots and links they choose to share with "Fill this in for me". Photos are read once to suggest answers and are not stored. For links, we read the public web page.
- Their own writing, if they choose "Learn my voice": with their OK, we read the captions on their recent posts and their own replies to comments, and turn them into a short description of their writing style. We keep only the description they approve, not the posts. Comments written by other people are not read for this.
- Their comment replies, if they turn on "Learn from my comment replies": we keep copies of the replies the owner wrote to comments on their posts, each with the comment it answered, with @usernames removed. The assistant uses the most similar ones as examples so it answers the way the owner does. We never use their DMs for this. Turning it off deletes these copies. The owner's own edits of practice and Activity replies are also kept as examples.
- Practice replies: the sample questions, the assistant's answers, and the owner's approvals, edits and notes. We keep these, including ones the owner removes from view, to improve how the assistant answers.
- Sign-in and usage data: sign-in sessions, basic logs (such as dates, errors and IP addresses in server logs), and how much the AI features are used.
3. Information about people who message owners
When someone comments on an owner's post or sends them a direct message on Instagram, Instagram sends it to us so the owner's assistant can reply. We receive:
- the person's Instagram-scoped ID (an ID Instagram creates for our app), and their username when Instagram provides it;
- the text of the comment or message, and when it was sent;
- the replies sent by the assistant, and whether the conversation was passed to the owner.
We use this only to reply on the owner's behalf, to pass conversations to the owner when needed, and to keep the service working properly. We don't contact these people for any other reason, and we don't build profiles about them.
4. How we use information
- To provide the service: reading comments and messages, writing replies with the owner's information, and alerting the owner.
- To set up and support owners: sign-up, sign-in emails, practice replies and their dashboard.
- To keep the service safe and reliable: preventing abuse, fixing problems, and respecting Instagram's rules (for example, only replying within the time windows Instagram allows).
- To improve the service: reviewing practice replies and owners' edits and notes to make answers better.
- To meet legal obligations.
We access Instagram data only through Meta's official Instagram API with Instagram Login, and use it only as allowed by Meta's Platform Terms and Developer Policies. We have implemented Meta's Deauthorization callback and Data Deletion Request callback.
5. How the AI works
Replies are written by an AI model using only the information the owner gave us and the conversation itself. When answering questions about services, products, prices or care, the assistant introduces itself as the owner's assistant, unless the owner chooses no introduction. To simple friendly comments (like a compliment), it may reply briefly in the owner's style without an introduction. It never claims to be the owner or a human, never makes up the owner's personal answers, and says honestly that it's an assistant if asked. Anything personal or sensitive, and possible medical issues, are passed to the owner.
To write replies, we send the relevant text to our AI provider, Anthropic, through its commercial API. Under Anthropic's commercial terms, this data isn't used to train its models.
6. Who we share it with
We don't sell or rent personal information, and we don't share it for advertising. We share it only with companies that help us run the service, under contracts that limit how they use it:
| Company | What they do for us |
|---|---|
| Meta (Instagram) | Delivers comments and messages to us and sends our replies. |
| Anthropic | The AI model that writes replies, reads uploaded photos and links, and describes writing style. |
| Resend | Sends our emails, such as sign-in links. |
| Cloudflare | Website hosting, network security and connections to our servers. |
Our servers are in the United States. We may also share information if the law requires it, to protect people's safety or our rights, or as part of a sale or reorganization of our business (in which case this policy would continue to apply).
7. How long we keep it
- Comments and messages from people who write to an owner, and our replies: up to 90 days, then deleted. The raw notifications Instagram sends us are deleted after 30 days.
- Owners' reply examples (from their comment replies): until the owner turns learning off or closes their account.
- Owner account details, their assistant's information and practice replies: while the account is active. When an owner closes their account or asks us to delete it, we delete it within 30 days, except where the law requires us to keep something.
- Instagram access tokens: deleted as soon as the owner disconnects our app or asks us to delete their data.
- Sign-in links expire after 20 minutes. Sessions expire after 30 days.
Instagram / Meta data deletion
If an owner removes our app from Instagram (Settings and activity → Website permissions → Apps and websites, or Accounts Center), Meta notifies us immediately through its Deauthorization callback. We delete that account's Instagram access token right away and stop all replies for it. Unless the owner reconnects, we delete the rest of the account's data within 30 days.
Owners, or Meta on their behalf, can also ask for full deletion. When Meta sends a Data Deletion Request, we delete the account's data (usually within hours, always within 30 days) and return a confirmation code and a link where the status can be checked.
Anyone can also ask for deletion by emailing support@dingmate.com. See Data deletion. We may keep a minimal record that a deletion happened, or what the law requires us to keep.
8. Security
We protect information with encryption in transit (HTTPS), encryption of Instagram access tokens at rest, sign-in links and sessions that are stored only as one-way fingerprints (hashes), limited access, and regular backups. No system is perfectly secure, but we work to protect your information and will notify affected people as the law requires if a breach happens.
9. Your choices and rights
- Owners can see and change their information any time in their account at app.mysticpulse.ai, and can disconnect our app from Instagram at any time.
- Anyone can ask to see, correct or delete information we hold about them. See Data deletion or email support@dingmate.com. We reply within 30 days.
- Depending on where you live, you may have additional rights under local law (for example, in California or the European Union). Contact us and we'll help.
10. Children
Our service is for businesses and creators who are 18 or older. We don't knowingly collect information from children under 13. If you believe a child has given us information, contact us and we'll delete it.
11. Changes and contact
If we change this policy, we'll update the date at the top, and for important changes we'll tell owners by email or in their account. Questions or requests: support@dingmate.com, Mystic Pulse Capital LLC, Falls Church, Virginia, USA.