Quiet Barakah - Privacy Policy

Last updated: November 7, 2026

Who we are

Quiet Barakah ("we", "us") publishes content on YouTube and Instagram. We are setting up a tool called Replybox, which is not yet in operation. Once running, it is designed to send an automatic Instagram direct message or comment reply when someone comments a trigger word on our posts or messages our account. This policy describes how the tool handles data. Contact: officialthemuslimtechie@gmail.com

Data we receive and store

• Our Instagram account connection: account ID, username, name and profile picture link. Access tokens are stored encrypted and are never shown in the dashboard.
• People who comment or message us: Instagram-scoped user ID, username, and the times of their last message to us and from us.
• Message log: the comment or message that triggered a reply, the matched keyword, the reply we sent (up to 2,000 characters), any public comment reply, and any error text.
• Link clicks: if a reply contains a tracked link, we record a keyed hash of the recipient ID, a hash of the IP address, and the browser user agent and referrer (up to 400 characters each).
• Technical records from Instagram: raw notifications and operational logs, which can include usernames and comment text.
• Dashboard users: email, name, a hashed password and a hashed session token with the browser user agent.
• Processing data: queued jobs holding comment and message text (the most recent 1,000 completed jobs are kept with no fixed expiry until newer jobs replace them; failed jobs are kept for 24 hours) and rate-limit counters that include IP addresses for up to 15 minutes. Server logs record only the request method and path.

How we use it

Only to send the replies you trigger, show activity to the account operator, prevent abuse and fix errors. We do not sell your data. We share it only with Meta (Instagram), to send and receive messages and comments, and with the hosting services that run the tool.

How long we keep it

• Raw Instagram notifications, operational logs and processed-event records are deleted automatically once they are older than 30 days. A cleanup job checks every 6 hours.
• Login sessions are deleted automatically after they expire.
• Message logs, the list of people who interacted with us, link-click records, campaigns and connected-account records are kept until they are deleted. There is no automatic deletion for these today.
• We do not anonymise data; a record is either kept or deleted.

Deleting your data

Email officialthemuslimtechie@gmail.com with your Instagram username and ask us to delete your data. We will look for records linked to that username in the message log, the list of people who interacted with us and link-click records, and delete what we find. Some data is not removed straight away: raw notifications and logs are removed on the schedule above, and queued job data is removed only as newer jobs replace it, so comment or message text linked to you may remain there for some time after a request. We have not confirmed whether backup copies exist or how long they last, so we cannot promise that every copy is erased. Copies already held by Meta are governed by Meta's own policies. Disconnecting the Instagram account in our dashboard deletes its stored tokens, campaigns, contacts, message logs and link-click records.

Third parties

Instagram and Meta (messaging and comment services, subject to Meta's terms and privacy policy) and the hosting services that run the tool.

Changes

We will post any changes on this page with a new date. Questions: officialthemuslimtechie@gmail.com