BoostBirgaBoostBirga

Privacy Policy

Last updated: 2026-06-01

1. Who we are

BoostBirga (“we”, “our”, “us”) is a mobile and web platform with two parts: a consumer content-sharing feature where you post your Instagram/Telegram links and discover others’, and ChatPlace, an Instagram Business messaging-automation tool for businesses. This policy covers both the BoostBirga mobile app (iOS and Android) and the web dashboard. We are operated by Oybek Ustemirov from Tashkent, Uzbekistan. You can reach us at privacy@ustemirov.uz.

2. What data we collect

  • Account information: when you sign in with Telegram we receive your Telegram user ID, username, first/last name, and (if set) profile photo. We do not receive your phone number or message history.
  • Content you submit: the Instagram/Telegram post links and captions you publish, and your in-app activity (which posts you viewed and confirmed, and your in-app point balance).
  • Instagram Business account data (ChatPlace): when you connect an Instagram Business account, we receive your IG user ID, username, the linked Page ID, and a long-lived access token.
  • Direct Messages (ChatPlace): incoming DMs and comments from your followers, including text, attachments, and sender metadata, used to match your auto-reply rules and shown in your Inbox.
  • Automation rules: the keyword triggers, reply templates, and workflow graphs you create.
  • Device & diagnostic data: app and device information, usage analytics and feature flags (via Google Firebase Analytics and Remote Config), and crash reports (via Sentry). No DM content is sent to third-party services.

3. How we store data

All data is stored on servers located in Frankfurt, Germany. Long-lived Instagram access tokens are encrypted at rest with AES-256-GCM using per-tenant initialization vectors. Database backups are encrypted and retained for 30 days.

4. How we use data

  • To match incoming DMs against the rules you have configured.
  • To send auto-replies on your behalf via the Instagram Send API.
  • To display your Inbox and analytics in the dashboard.
  • To diagnose errors and improve the product.

We do not sell your data. We do not train machine-learning models on your DM content. We do not share your data with advertisers.

5. Third parties

We share data with the following processors, each only for the purpose listed:

  • Telegram — sign-in (Telegram Login Widget).
  • Meta / Instagram Graph API — receiving and sending Instagram messages (ChatPlace).
  • Google Firebase — usage analytics and remote feature configuration.
  • Sentry — crash and error reporting (DM content is scrubbed before transmission).
  • Vercel — hosting the web dashboard.

We do not sell your data, and none of these parties have direct access to your stored DM content.

6. Data retention

  • DM events: 90 days, then archived to cold storage and purged after one year.
  • Automation rules: until you delete them.
  • Account data: until you request deletion.

7. Your rights

You can:

  • Access your data via the dashboard at any time.
  • Request a full export by emailing privacy@ustemirov.uz.
  • Delete your account and all associated personal data directly in the mobile app (Profile → Delete account), via the Data Deletion page, or by revoking BoostBirga in your Instagram/Facebook settings (Apps and Websites → BoostBirga → Remove).

8. Compliance

This policy aligns with the Meta Platform Terms of Service and the Uzbekistan Personal Data Protection Act (UZ-PDPA). For users in the European Economic Area, the lawful basis for processing is contract performance and legitimate interest under Article 6(1)(b) and 6(1)(f) of the GDPR.

9. Changes

We may update this policy. Material changes will be announced via email and/or in-app banner at least 14 days before they take effect.

10. Contact

Questions, complaints, or data-related requests: privacy@ustemirov.uz.