Your account, and your followers, kept safe.

Your account

• Official API only. HeyJaanu works through Meta’s official Instagram API, and you connect your account on Instagram’s own consent screen.
• No passwords. We never ask for your Instagram password, and no access token is ever typed, pasted or sent to us.
• Your connection is locked. The access Instagram gives us is encrypted at rest with AES-256-GCM, and the key is kept outside the database.
• Each client is walled off. One client’s data is separated from another’s inside the database itself, at the row.
• Messages from Instagram are checked. Every notification from Meta is verified by its cryptographic signature before it is used.

Instagram’s limits

• One DM per person per day from your account. This is Meta’s rule, and HeyJaanu keeps it.
• Hourly and daily caps per post and per account, set to your account’s real volume. When a cap is reached, a reply waits and goes out later, but only inside Instagram’s seven-day reply window. After seven days nobody can reply to a comment.
• It stops itself. If Instagram starts refusing messages, HeyJaanu stops trying instead of pushing harder. A spam warning from Instagram (error 368) stops sending at once, for 24 hours. Meta’s usage figures are read all the time, and sending pauses before Meta’s limit, not after it.

Your followers

• Every DM says it is automated. Each message carries a short line saying so, and no setting can remove it.
• “Stop” means stop. If someone comments “stop” (or a similar refusal on its own) on your posts, they go on a list the application cannot delete from, and they never get another automated message from your account.
• No mass DMs. It replies to people who write first; WhatsApp updates go only to customers who said YES.

What we keep

What is stored, why, and for how long is on the privacy page, with each retention period listed. Anyone can ask us to delete their records.

What we will not claim

Instagram’s rules belong to Meta and can change. We follow them as they are, and we tell you when they change, but no one can promise an account will never be restricted.