Privacy Policy
Last updated: May 30, 2026
Mindflow ("we", "us"), operated by BroTech and available at smm.brotech.uz, is an AI-powered Instagram growth assistant. This policy explains what data we collect, how we use it, who we share it with, and how you can delete it.
1. Information we collect
- Account data — your name, email, password hash, and locale when you register.
- Onboarding data — your declared field/area, target audience, current and goal follower counts, and content preferences.
- Instagram data (via the Meta Graph API, with your consent) — your Instagram Business/Creator profile (username, name, biography, profile picture, follower/following/media counts), your media (posts, captions, thumbnails), media insights (reach, saves, shares, views), audience demographics (age, gender, city ranges), and comments on your posts.
- Usage data — task progress, generated scripts, and product analytics.
2. How we use your data
- Generate a personalized content roadmap and scripts for your account.
- Analyze your performance and audience to give growth recommendations.
- Track progress toward your stated follower goal.
- Operate, secure, and improve the service.
3. Instagram / Meta permissions
We request only the permissions needed to deliver the coaching features:
instagram_business_basic— read your profile and media to build your roadmap.instagram_business_manage_insights— read reach/saves/audience insights to measure progress and forecast growth.instagram_business_manage_comments— read comments so the assistant can suggest replies and gauge sentiment.instagram_business_content_publish— (optional, future) publish content you explicitly approve.
We never post or comment without your explicit action. Access tokens are stored encrypted at rest.
4. Third-party processors
To generate content and analyses we send the minimum necessary text to AI providers: Anthropic (Claude), OpenAI, Google (Gemini), Groq, and Voyage AI (embeddings). We also use infrastructure providers for hosting, object storage, and email, and Payme for payments. These processors handle data under their own terms and only to provide their service to us.
5. Data retention
We keep your data while your account is active. Instagram tokens expire after ~60 days and are refreshed only while you remain connected. You can disconnect Instagram or delete your account at any time (see below).
6. Deleting your data
You can request deletion in three ways:
- Remove the app from your Instagram settings — Meta notifies us and we erase all data tied to your Instagram account automatically.
- Use the in-app account deletion (Settings).
- Email us (below).
See our Data Deletion instructions for details.
7. Security
Data is encrypted in transit (HTTPS). OAuth tokens are encrypted at rest. Access is scoped per tenant so one user can never read another's data.
8. Children
Mindflow is not directed to anyone under 13 (or the minimum age in your jurisdiction).
9. Changes
We may update this policy; material changes will be posted here with a new "Last updated" date.
10. Contact
Questions or data requests: support@brotech.uz