BoostBirgaBoostBirga

Privacy Policy

Last updated: 2026-08-15

1. Who we are

BoostBirga (“we”, “our”, “us”) is a mobile and web platform with two parts: a consumer content-sharing feature where you post your Instagram/Telegram links and discover others’, and ChatPlace, an Instagram Business messaging-automation tool for businesses. This policy covers both the BoostBirga mobile app (iOS and Android) and the web dashboard. We are operated by Oybek Ustemirov from Tashkent, Uzbekistan. You can reach us at Telegram support.

2. What data we collect

  • Account information: when you sign in with Telegram we receive your Telegram user ID, username, first/last name, and (if set) profile photo. We do not receive your phone number or message history.
  • Content you submit: the Instagram/Telegram post links and captions you publish, and your in-app activity (which posts you viewed and confirmed, and your in-app point balance).
  • Instagram Business account data (ChatPlace): when you connect an Instagram Business account, we receive your IG user ID, username, the linked Page ID, and a long-lived access token.
  • Direct Messages (ChatPlace): incoming DMs and comments from your followers, including text, attachments, and sender metadata, used to match your auto-reply rules and shown in your Inbox.
  • Automation rules: the keyword triggers, reply templates, and workflow graphs you create.
  • Device & diagnostic data: app and device information, usage analytics and feature flags (via Google Firebase Analytics and Remote Config), and crash reports (via Sentry). No DM content is sent to third-party services.

3. How we store data

Application data is stored on a Hetzner Cloud server. Long-lived Instagram access tokens are encrypted at rest with AES-256-GCM using a random initialization vector per row. Database backups are compressed (not encrypted at rest) and retained on our server for up to 14 days; an off-site copy, when enabled, is retained for up to 90 days.

4. How we use data

  • To match incoming DMs against the rules you have configured.
  • To send auto-replies on your behalf via the Instagram Send API.
  • To display your Inbox and analytics in the dashboard.
  • To diagnose errors and improve the product.

We do not sell your data. We do not train machine-learning models on your DM content. We do not share your data with advertisers.

5. Third parties

We share data with the following processors, each only for the purpose listed:

  • Telegram — sign-in (Telegram Login Widget).
  • Meta / Instagram Graph API — receiving and sending Instagram messages (ChatPlace).
  • Google Firebase — usage analytics and remote feature configuration.
  • Sentry — crash and error reporting (DM content is scrubbed before transmission).
  • Vercel — hosting the web dashboard.

We do not sell your data, and none of these parties have direct access to your stored DM content.

6. Data retention

  • DM events and comments (ChatPlace): retained until you delete your account, disconnect the Instagram account, or specifically request removal. We do not currently run an automatic time-based purge of this data; this is a planned improvement.
  • Automation rules and uploaded media: until you delete them or your account.
  • Account data: until you request deletion — see our Data Deletion page for exactly what is and is not removed by each deletion path.

7. Your rights

You can:

  • Access your data via the dashboard at any time.
  • Request a full export by emailing Telegram support.
  • Delete your account directly in the mobile app (Profile → Delete account), or disconnect Instagram via the Data Deletion page instructions or by revoking BoostBirga in your Instagram/Facebook settings (Apps and Websites → BoostBirga → Remove). See the Data Deletion page for exactly what each action removes — some data (automation rules, uploaded media) is deleted only when you remove it yourself.

8. Compliance

This policy aligns with the Meta Platform Terms of Service and the Uzbekistan Personal Data Protection Act (UZ-PDPA). For users in the European Economic Area, the lawful basis for processing is contract performance and legitimate interest under Article 6(1)(b) and 6(1)(f) of the GDPR.

9. Changes

We may update this policy. Material changes will be announced via email and/or in-app banner at least 14 days before they take effect.

10. Contact

Questions, complaints, or data-related requests: Telegram support.