Privacy Policy
Salty, operated by Amaracus Ltd · Last updated 4 August 2026
Salty is a tool that businesses connect to their own Instagram account. When someone contacts that business — by commenting on its posts or sending it a direct message — Salty helps the business reply.
Who is responsible for your data
If you commented on or messaged a business that uses Salty, that business is the data controller. It decides what to do with your message. Amaracus Ltd is a data processor: we handle the data only on that business's instructions, and we do not use it for our own purposes.
To exercise your rights, you can contact the business directly, or contact us at filippos@amaracus.org and we will act on the controller's instruction.
What we process, and why
| Data | Why |
|---|---|
| The text of your comment or message | To understand what you asked and write a relevant reply |
| Your Instagram username and the account ID Instagram gives us | To address you, and to send the reply to the right conversation |
| Which post you commented on | To give the reply context, and to report to the business which posts lead to conversations |
| Whether a reply was delivered, read, or clicked | To report on whether the business's replies are useful |
| A reference to an order, if you buy something | To tell the business the conversation led to a sale. We receive an order reference and amount, not your payment details. |
We remove sensitive details before storing anything.
Email addresses, phone numbers and card numbers are stripped from your
message at the moment it arrives — before it is saved, before it is shown to
anyone, and before it reaches the AI model. If you volunteer a phone number,
what gets stored is [REDACTED_PHONE].
What we never do
- We never message you first. Salty only acts after you have contacted the business.
- We do not scrape your profile. We use only what Instagram's official API provides and what you wrote to the business.
- We do not sell your data, and we do not use it for advertising or to build profiles across businesses. Each business's data is kept separate from every other's.
- We do not use your messages to train AI models.
Who else processes it
| Who | What for |
|---|---|
| Anthropic | Generating the reply. Message text is sent for processing and is not used to train their models. |
| Meta (Instagram) | The platform the conversation happens on |
| Fly.io | Hosting. Data is stored in Frankfurt, Germany (EU). |
| Shopify | Only where the business uses it, for order matching |
| The business's own Slack | Where the business reviews replies before they are sent, if it has chosen to do so |
Where it is stored, and for how long
Data is stored in the European Union (Frankfurt, Germany). We keep conversation records for as long as the business is a Salty customer, so it can see its own history, and we delete them within 30 days of the business ending its use of Salty or asking us to erase them.
Your rights
Under the GDPR you can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted. See how to request deletion. We respond within 30 days.
You can also stop Salty from processing anything new at any time, by not messaging or commenting on the business's account, or by blocking it on Instagram.
Contact
Amaracus Ltd — filippos@amaracus.org
If you are in the EU and believe we have handled your data improperly, you have the right to complain to your national data protection authority.