Privacy Policy

1) Who we are

Sellgram (OPC) Private Limited ("we," "us," or "our") operates SellGram, a platform for creators with three products under one account: Telegram Memberships (paid subscriptions and membership tools for Telegram channels and groups), Link in Bio (public link pages) and Instagram AutoDM (automated Instagram replies). This Privacy Policy applies to our website, dashboard, and related services (collectively, the "Service"). It applies to every product; sections 12–14 add what is specific to each one.

2) Information we collect

a) Information you provide

• Account details: name, email address, phone number, password (stored in hashed form).
• Creator profile: channel/group names, descriptions, pricing, cover images.
• Payout information: bank account, UPI ID, PAN/tax IDs, and other details required for payouts and compliance.
• Support communications: messages, tickets, and feedback you send us.

b) Information collected automatically

• Usage data: pages visited, features used, referrers, timestamps, and actions taken on the dashboard.
• Device and log data: IP address, browser type, operating system, device identifiers, and crash logs.
• Cookies and similar technologies: see the "Cookies" section below.

c) Information from third parties

• Telegram: when you connect a Telegram channel or bot, we receive identifiers needed to manage access (such as Telegram user ID, channel ID, and bot tokens you provide).
• Instagram (Meta): when you connect an Instagram account to Instagram AutoDM, we receive the data described in section 14.
• Payment gateways: we receive transaction metadata (amount, status, reference ID, partial card/UPI info) but do not store full card numbers or CVVs on our servers.
• Analytics providers: aggregated usage statistics to help us improve the Service.

d) Subscriber information (for creators)

If you are a subscriber purchasing access through a creator on SellGram, Sellgram (OPC) Private Limited collects the information needed to process your payment and grant access: email, payment identifiers, Telegram user ID, and transaction history.

3) How we use your information

We use collected information to:

• Provide, operate, and maintain the Service (including granting and revoking Telegram access).
• Process payments, payouts, refunds, and chargebacks.
• Verify identity, prevent fraud, and comply with legal obligations (KYC, AML, tax reporting).
• Communicate with you about your account, updates, security alerts, and support requests.
• Improve the product — diagnose bugs, analyze usage patterns, and build new features.
• Send marketing communications (only where you've opted in or where permitted by law — you can unsubscribe anytime).

4) Legal basis for processing (GDPR/DPDP users)

Where applicable, Sellgram (OPC) Private Limited relies on the following legal bases: performance of a contract with you, compliance with a legal obligation, our legitimate interests (such as fraud prevention and service improvement), and your consent (for marketing or optional cookies).

5) Sharing your information

We do not sell your personal data. We share information only with:

• Our payment aggregator (a third-party payment processor, which we may change from time to time) to complete transactions.
• Infrastructure providers (hosting, database, email delivery) under appropriate data-processing agreements.
• Telegram, to the extent required to invite, remove, or manage subscribers in your channels.
• Instagram (Meta), to the extent required to send the replies and messages you set up in Instagram AutoDM.
• Analytics and anti-fraud services that help us understand usage and prevent abuse.
• Legal and regulatory authorities when required by law, court order, or to protect rights and safety.
• In business transfers such as a merger, acquisition, or asset sale, subject to appropriate safeguards.

6) Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember preferences, measure usage, and improve the Service. You can control cookies through your browser settings. Disabling essential cookies may affect how the Service works.

7) Data retention

We retain personal data for as long as your account is active and for a reasonable period afterward to meet legal, accounting, or reporting obligations. Transaction records are typically kept for the period required by applicable tax and financial laws (often 5–8 years). When data is no longer needed, we delete or anonymize it.

8) Data security

We use industry-standard safeguards — encryption in transit (HTTPS/TLS), hashed passwords, access controls, and regular security reviews — to protect your information. No system is perfectly secure, however, and we cannot guarantee absolute security. If we become aware of a breach affecting your data, we will notify you as required by law.

9) International data transfers

Your information may be processed in countries other than where you live. When we transfer data across borders, we use appropriate safeguards consistent with applicable data protection laws.

10) Your rights

Depending on your jurisdiction (e.g., GDPR in the EU/UK, DPDP Act in India, CCPA in California), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Request a copy of your data in a portable format.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request. Step-by-step deletion instructions for every product are on our Data Deletion page.

11) Children's privacy

SellGram is not intended for children under 18 (or the age of majority in your jurisdiction). Sellgram (OPC) Private Limited does not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

12) Telegram Memberships

When you sell through SellGram on Telegram, we process the Telegram identifiers and bot tokens described in section 2(c), your payout details from section 2(a), and your subscribers' payment and access data from section 2(d). We share Telegram user IDs with Telegram only to invite, remove, and remind members. Transaction records are kept for the period required by tax and financial law (see section 7), even after an account is closed.

13) Link in Bio

• Page owners: everything you add to your page (profile photo, name, bio, links, blocks, theme) is public at your page address.
• Visitors: when someone opens a Link in Bio page or taps a block, we record the page or block, time, IP address, browser and device type, the referring site, UTM campaign tags, and a visitor cookie used to count unique visitors. We use this to show the page owner aggregated statistics — views, unique visitors, clicks, traffic sources, and devices — and to prevent abuse.
• Links on a page lead to other websites with their own privacy policies. UPI tips are paid directly through your UPI app; we do not process them.

Referral links: when someone opens a SellGram referral link, we record the time, IP address, approximate location (country, state, city), browser, device type, the referring site or app, UTM tags, a visitor cookie, and whether they later sign up. We use this to show the referrer how their link performs (without IP addresses), to work out referral commissions, and to detect fraud such as self-referrals. These records are deleted after 90 days; only daily totals are kept.

14) Instagram AutoDM

If you connect an Instagram professional (Business or Creator) account to Instagram AutoDM, we receive data from Instagram through the official Instagram API (Meta) using the permissions instagram_business_basic, instagram_business_manage_comments and instagram_business_manage_messages.

• Your connected account: Instagram user ID, username, name, account type, profile picture, follower / following / post counts, your posts and stories (ID, caption, thumbnail, link, date) and an access token, which we store encrypted.
• People who comment on your posts: their Instagram-scoped ID, username, the comment text, comment ID, post ID and time.
• People who message you, reply to your stories or mention you: their Instagram-scoped ID, the message text, message ID, time, and the ID of the story they replied to.

We use this data only to run the automations you set up: detect your keywords, send the replies and DMs you configured, check whether someone follows you when you turn on "Ask to follow first", and show you an activity log. We do not sell it, use it for advertising, or message anyone who has not first commented on your post, replied to your story, mentioned you, or messaged you. Automated messages say they are automated, and anyone can reply STOP to stop receiving them.

Retention: comment and message content, IDs and delivery logs are deleted after 45 days; only daily totals (counts, no content) are kept for your stats. The list of people who replied STOP is kept while your account is connected so their opt-out keeps being respected. Your account data, automations and access token are kept while Instagram AutoDM is connected.

Deleting your Instagram data

• If you connected your account: open Instagram AutoDM in your dashboard and click Disconnect. This immediately removes our access token and stops your automations; your automations, contacts and results are kept so you can connect again later. Removing SellGram in the Instagram app (Settings → Website permissions → Apps and websites) also stops our access straight away. To delete the data already stored, email [email protected] with your Instagram username and the words "DELETE MY DATA" — we delete it within 30 days and confirm by reply.
• If you interacted with an account that uses SellGram: email [email protected] with your Instagram username and the words "DELETE MY DATA". We delete your comments, messages and IDs within 30 days and confirm by reply.

More detail is on the Data Deletion page.

AutoDM plans: subscriptions are billed through Cashfree Subscriptions. We store your plan, subscription and payment IDs, amounts, dates and status, plus the payment method Cashfree reports for each payment (your UPI ID, or the card network / bank and only the last 4 digits of the card or account number), so you can see it in your billing history. Full card and bank account numbers and your UPI PIN are never shared with or stored by us — the mandate itself is handled by Cashfree and your bank. Billing records are kept as required by tax law.

15) Third-party services

Our Service integrates with Telegram, Instagram (Meta), payment gateways, and other third-party tools. These services have their own privacy policies, and we encourage you to read them. We are not responsible for the privacy practices of third parties.

16) Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the dashboard or email. The "Last updated" date at the top reflects the most recent version. Continued use of the Service after changes become effective means you accept the revised policy.

17) Contact us

For privacy questions, data access requests, or to exercise any of your rights, contact Sellgram (OPC) Private Limited:

• Email: [email protected]
• Support: contact page