heyjaanu

terms

What is agreed, before it matters.

A summary written to be read. It describes the services agreement rather than replacing it; where a signed agreement and this page differ, the agreement governs.

What the service does

Heyjaanu sends an automated private reply on Instagram to people who comment on your posts. Every top-level comment is answered; replies are not restricted by keyword. Keyword-restricted replies are not included, and are a change request rather than a setting. It is your own Instagram professional account, and you remain its owner throughout.

It is run for you rather than sold to you. We build the workflows, run them, watch them, and report on them, rather than handing you a tool and leaving you to operate it.

You create your own account, and you authorise Instagram yourself: the connection is made through Instagram’s own consent screen, and no access token is ever typed, pasted or sent to us. One step in the middle is ours and is done by a person — we add your Instagram professional account as a tester on our Meta app, and you accept that invitation in the Instagram app. Until you accept it, Instagram refuses the connection.

That role is also why nothing further is needed from Meta. The app operates under Meta’s Standard Access, which covers Instagram professional accounts we own or manage and accounts whose holder has been granted a role on our app, and every account we serve holds that role. Advanced Access, App Review and Business Verification would be required only for an app usable by people holding no role on it, and this service relies on none of them.

Your responsibilities

  1. You must own, or be authorised to operate, the Instagram account that is connected.
  2. You are responsible for what your automated messages say.
  3. You must not use the service to send anything unlawful, deceptive or harassing, or anything in breach of Instagram’s own Platform Terms and Community Guidelines.
  4. You must honour opt-outs. The service enforces this automatically, and you must not work around it.

What the service will not do

These are refused by design rather than by policy. There is no setting that turns any of them on.

  1. No unsolicited messages. A message is only ever sent to somebody who commented on your post first.
  2. No broadcast or bulk messaging. There is no such feature, and no API that would allow one.
  3. No reading of direct messages.
  4. No messaging anyone who has opted out.

The engagement, in four stages

  1. Discovery — we look at the account, the posts, and the words people actually use in the comments. No fee.
  2. Setup — workflow build, reply coverage on the selected posts, the DM and public-reply copy, testing, go-live. A one-time project fee, half on signature and half at go-live.
  3. Managed operation — monitoring, the workflows running, revisions, monthly reporting. A monthly retainer.
  4. Offboarding — written down before you need it: tokens revoked, deliverables handed over, commenter data deleted.

The Schedule of Platform Constraints

The list of things nobody can do on Instagram — the same list published on the landing page — is a schedule to the services agreement, and it is signed at the start rather than produced later as an excuse.

The reason is narrow and practical. Every item on it is a constraint Meta imposes on every product in this category. If it is agreed in writing before any money changes hands, nobody can be told afterwards that they were promised a follow-gate.

Approvals and timelines

Go-live is conditional on platform approvals. Where an approval is delayed, timelines extend day for day.

A refusal or a delay by Meta is not a breach of this agreement. It is also not something we will pretend to control, or quietly absorb into an estimate.

Intellectual property, split

Workflow configurations, message copy, and any keyword sets created under a change request are assigned to you on payment — worldwide, for the full term.

The platform itself, and anything general we learn while building, stays ours. Your account, your words and your audience are not part of that.

Data protection

You are the Data Fiduciary and we are the Data Processor, under India’s DPDP Act 2023. We process commenter data on your instruction and for no purpose of our own.

On exit, commenter data is deleted. Opt-out records are kept, and the privacy policy explains why: deleting the record that somebody said stop is how they start hearing from the account again.

Payment

Indian invoicing throughout: GST, TDS under section 194J, MSMED payment terms, and e-stamping where it applies.

There is no overage billing. Caps postpone a send, they do not drop it, so there is nothing to bill for. A pricing model that charges you more in the week your post does well is a model that profits from your success without contributing to it.

Instagram and Meta

The service operates within the limits Instagram sets, including the seven-day window for private replies and the rate limits applied to your account.

We are not affiliated with Meta Platforms. Instagram may change or withdraw access at any time, and where that prevents the service from operating, we cannot be held liable for it.

Availability

The service is provided on a best-efforts basis. It is not guaranteed to be uninterrupted or error-free, and delivery of any individual message is not guaranteed — a message may be withheld by rate limits, by Instagram, or by the service’s own safeguards.

Every one of those cases produces a named outcome against the comment that caused it, which is the part we do guarantee: you can always find out what happened.

Liability

To the extent permitted by law, the service is provided without warranties, and liability is limited to the amount paid for the service in the three months before the claim arose.

Nothing here limits liability that cannot lawfully be limited.

Ending use

You may stop at any time by revoking the app’s access from Instagram, or by asking us to delete your organisation. Either party may end the managed operation on thirty days’ written notice; fees already earned are payable and fees for a period not yet started are not.

We may suspend access where the service is being used in breach of these terms or of Instagram’s.

On ending, the offboarding stage runs whether or not the ending was amicable. Tokens are revoked, deliverables are handed over, and commenter data is deleted.

Governing law

These terms are governed by the laws of India.

Schedule 1 — Platform constraints

Signed at the start of the engagement. Every line is a limit Instagram imposes on every product in this category, ours included. It is here so that no part of it can arrive later as a surprise or as an excuse.

Claim you will hear elsewhereThe constraint
Only DM people who follow youAt the moment of sending, whether somebody follows you is not readable — Meta consent-gates the field. It can be checked afterwards, which is a different promise.
Broadcast DMs to everyoneThere is no such API. A message is a reply to somebody who contacted you first, inside a window that expires.
Unlimited DMs per personOne private reply per comment, ever. Not a policy — a platform constraint.
We’ll reply to old comments foreverThe window is seven days from the comment. After that nobody can reply, at any price.
Send a PDF or an image in the DMA private reply carries text and a link, not an attachment.
We’ll automate your private accountA private account produces no comment webhook at all.
Scrape their followersOff the table. Official APIs only — which is also the reason the account stays yours.

The rest

How commenter data is handled is set out in the privacy policy, which forms part of these terms. Anybody wanting their data removed can use the deletion routes without an account and without going through the client.

Questions before signing anything go to [email protected].