Privacy Policy

Ulifiz is operated by Lumni Digital. Ulifiz lets businesses connect their Instagram Professional account and answer direct messages automatically, using instructions the business writes. For anything about this policy, write to support@ulifiz.com.

• Account data: the email address and a securely hashed password of the person who signs up.
• Instagram account data, after the business authorizes it: account ID, username, display name, account type, follower count and an access token, stored encrypted.
• Conversation data received through Instagram: the sender's Instagram-scoped ID, name, username and follower count, message text, and timestamps.
• Automation settings written by the business, including its prompt and hand off keywords.
• Technical data needed to run and protect the service, such as IP address for rate limiting and error reports.

• To show the business its Instagram conversations and let it reply.
• To generate automatic replies: the business prompt and recent messages of a conversation are sent to our AI provider, which returns a suggested reply that we send through the Instagram API.
• To keep the service secure, prevent abuse and fix errors.

We do not sell personal data. We share it only with providers that run Ulifiz on our behalf:

• Meta Platforms, to receive and send Instagram messages.
• Supabase, for the database and authentication, hosted in São Paulo, Brazil.
• OpenAI, to generate replies. Requests are made through the API with storage disabled, and API data is not used to train OpenAI models by default.
• Our hosting and error monitoring providers.

Conversations and messages are kept while the Instagram account stays connected. Disconnecting Instagram deletes that account's conversations, messages and access token immediately. Deleting a Ulifiz account deletes all of its data within 30 days.

Under the Brazilian LGPD and similar laws, you can ask to access, correct, export or delete your data, and to know who we share it with. People who messaged a business that uses Ulifiz can also contact that business directly. Send requests to support@ulifiz.com. See also our data deletion instructions.

Access tokens are encrypted at rest, database access is restricted per workspace with row level security, and all traffic uses HTTPS. No system is perfectly secure, so we also limit the data we store to what the service needs.