ReelOxa is a product of GA Ventures and is owned and operated by GA Ventures
Last updated: October 4, 2026 · Policy version: 2026-10-04
ReelOxa ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our Instagram AutoDM and messaging automation features.
Business Identity: ReelOxa is a product of GA Ventures.
Company: ReelOxa is a product of GA Ventures and is owned and operated by GA Ventures
Address: 32/12, Rai Charan Ghosh Lane, Kolkata – 700039, India
Mobile: 9123770635
Email: help@reeloxa.com
Personal Information: Name, email address, and account credentials when you register.
Usage Data: Information about how you use our platform, including pages visited, features used, and time spent.
Content You Provide: Message templates, links, media and campaign settings you create to run Instagram automations.
Device Information: Browser type, operating system, and device identifiers.
Instagram Data: When you connect your Instagram account, we collect your Instagram User ID, username, profile information, and access tokens necessary to provide our AutoDM services. We also receive comment and message data required to process automated replies and direct messages.
WhatsApp Business Data: When you connect a WhatsApp Business account to ReelOxa Wazzup, we collect your business account and phone number details and access token, and receive your customers' WhatsApp messages, contact details and message delivery statuses, as described in section 4B.
Our AutoDM feature integrates with the Instagram Platform API. When you connect your Instagram account and enable AutoDM:
(a) We receive webhook notifications from Instagram when users comment on your posts or send messages.
(b) We process comment text to match against your configured keywords and trigger automated responses.
(c) We send direct messages and public comment replies on your behalf through the Instagram API.
(d) We store logs of sent messages and replies for service delivery and troubleshooting purposes.
We do not use Instagram data for advertising, profiling, or any purpose other than providing the AutoDM automation service you explicitly configure.
Our Facebook AutoDM feature is a separate integration from Instagram. When you connect Facebook and select a Page you administer:
(a) We collect your Facebook User ID and name, the list of Pages you manage, and the Page ID, name and access token for each Page you connect. Page access tokens are stored server-side only and are never exposed in the browser.
(b) We receive webhook notifications from Meta when someone comments on posts of your connected Page, including the comment ID, comment text, post ID and the commenter's Facebook name and Page-scoped ID (PSID).
(c) We use that data solely to match your configured keywords, publish the public comment reply you configured, and send the Messenger message you configured to that commenter.
(d) We store Page posts, comment events and Messenger delivery logs for service delivery, duplicate prevention and troubleshooting.
(e) We request only the permissions required for this feature (viewing your Pages, reading and managing Page engagement, Page metadata and Page messaging). We do not access your personal Facebook profile content, friends, photos or private messages unrelated to your connected Page.
We do not use Facebook data for advertising, profiling, resale, or any purpose other than running the automation you explicitly configure.
ReelOxa Wazzup is a separate integration that connects a WhatsApp Business account through Meta's WhatsApp Business Platform (Cloud API). When you connect a WhatsApp Business account:
(a) We collect your WhatsApp Business Account ID, phone number ID, display phone number, verified business name, account status and quality rating, and your message templates and their approval status.
(b) We receive webhook notifications from Meta when your customers message your WhatsApp Business number, including the customer's phone number, WhatsApp profile name, message content, media shared in the chat, and time stamps, as well as delivery, read and failure statuses for messages you send.
(c) We use this data solely to let you view, organise and reply to your customer conversations, send approved message templates, and show delivery status in your ReelOxa dashboard.
(d) For these conversations you (the business) decide which customers are contacted and why. ReelOxa processes this data on your behalf as a service provider, and you are responsible for obtaining your customers' opt-in consent before messaging them.
(e) WhatsApp access tokens are encrypted and stored server-side only and are never exposed in the browser. Incoming WhatsApp webhooks are signature-verified and deduplicated before they are processed.
(f) We follow the WhatsApp Business Messaging Policy, including sending free-form messages only within 24 hours of a customer's last message and approved templates outside that window.
We do not use WhatsApp data for advertising, profiling, resale, training AI models, or any purpose other than providing the Wazzup service you configure.
We use the information we collect to: (a) provide, maintain, and improve our services; (b) deliver your Instagram DM and comment automations, Facebook Page comment and Messenger automations, WhatsApp Business conversations, and link tracking analytics; (c) operate AutoDM automation based on your configured settings; (d) communicate with you about updates and support; (e) monitor and analyze usage trends; (f) protect against unauthorized access and fraud.
Any information we collect from you is used by ReelOxa only for legitimate, service-related purposes, including:
(a) Account and service-related communication;
(b) Transaction and billing notifications;
(c) Important product or security updates;
(d) Updates about new features and improvements;
(e) Other relevant communication about ReelOxa services.
We do not sell your data. We do not share your personal information with third parties for unrelated marketing purposes. Sharing is limited to the service providers listed in this policy (payments, email delivery, Instagram/Facebook/WhatsApp (Meta) and AI processing), strictly as needed to operate the service, or where the law requires it.
Marketing emails are optional. You can unsubscribe from them at any time without losing access to essential account, billing and security communication.
Your data is stored on secure servers. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Instagram, Facebook Page and WhatsApp Business access tokens are stored server-side, encrypted at rest, and are never sent to the browser. All incoming Meta and WhatsApp webhooks are signature-verified before processing.
We do not sell your personal information. To operate ReelOxa, we share limited data with the following service providers, each only as needed to deliver their part of the service:
Meta Platforms, Inc. (Instagram / Facebook / WhatsApp): We exchange data with Meta as required for Instagram API functionality — receiving comments and messages, sending replies and direct messages on your behalf, and verifying follower status — and, separately, for Facebook Page functionality — receiving Page comment webhooks and sending public comment replies and Messenger messages from your connected Page — and, separately, for WhatsApp Business functionality — sending your WhatsApp messages and templates through the WhatsApp Cloud API and receiving incoming messages and delivery statuses. Meta's and WhatsApp's own privacy policies govern their use of that data.
Razorpay Software Pvt. Ltd.: When you purchase a plan or subscription, your payment is processed by Razorpay. Razorpay receives your name, email, contact details and payment instrument details to process the transaction. We do not store your full card or UPI credentials on our servers.
Brevo (Sendinblue SAS): We use Brevo to send transactional and lifecycle emails (such as welcome, onboarding and account alerts). Brevo receives your name and email address for this purpose.
AI Providers: AI-powered features (AI DM replies, comment replies, content suggestions and related analysis) are processed through the Lovable AI Gateway, which routes requests to underlying model providers including OpenAI, Google (Gemini) and Groq. Relevant conversation or content text is sent to these providers solely to generate the response or analysis you requested. We do not use your data to train AI models.
We may also disclose information to law enforcement when required by law, or to third parties with your explicit consent.
We use cookies and similar technologies to keep you signed in, remember your preferences and measure our marketing. Non-essential tracking technologies (including our advertising measurement pixel) are only activated after you give consent through our cookie banner. You can accept or decline tracking at any time, and your choice is remembered. Essential cookies required for the service to function do not require consent.
You have the right to: (a) access and receive a copy of your personal data; (b) request correction of inaccurate data; (c) request deletion of your data; (d) withdraw consent at any time, including cookie consent; (e) object to or restrict processing of your data; (f) data portability; (g) lodge a complaint with a data protection authority.
Retention period: We retain your personal information — including your account details, connected Instagram account data, connected Facebook Page data, connected WhatsApp Business account data, campaign configurations, DM, Messenger, WhatsApp and comment automation logs, WhatsApp contacts and conversations, and captured leads — for as long as your account remains active, and delete it when you delete your account or request deletion. We do not keep your data after your account is closed, except where a longer retention is required by law (for example, payment records retained for tax and accounting obligations). Raw Meta and WhatsApp webhook receipts used for duplicate prevention are automatically purged after 7 days.
You may disconnect your Instagram account, any Facebook Page or your WhatsApp Business account at any time from your ReelOxa dashboard. Upon disconnection, we immediately delete the related access token, stop receiving webhooks for it and cease processing new events. WhatsApp contacts, conversations, messages and delivery records for a disconnected account are deleted within 30 days. To permanently delete your account and all associated data, contact help@reeloxa.com or follow the steps at reeloxa.com/data-deletion; we will complete deletion within 30 days.
ReelOxa is not intended for children under the age of 18. We do not knowingly collect personal information from children.
Our use of the Instagram Platform, the Facebook Graph API, the Messenger Platform and the WhatsApp Business Platform (Cloud API) is subject to and compliant with the Meta Platform Terms, the Instagram Platform Policy, the Messenger Platform Policy, the WhatsApp Business Terms of Service, the WhatsApp Business Messaging Policy and the WhatsApp Commerce Policy. We only collect, use, and share Instagram, Facebook and WhatsApp data as permitted by these terms and as described in this Privacy Policy.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the updated policy on this page and updating the "Last updated" date.
If you have any questions about this Privacy Policy, or wish to exercise your data rights, please contact us at:
Email: help@reeloxa.com
Mobile: 9123770635
Address: 32/12, Rai Charan Ghosh Lane, Kolkata – 700039, India
Short answers about how ReelOxa handles your data. Questions? Contact us.