Privacy policy
A working draft. Each section states what Mastak does today in plain words; the dashed boxes tell our lawyer what the final text still needs.
Last updated: draft, Nov 2026
Who we are
Mastak is software that answers Instagram comments and direct messages for businesses, with an AI seller that works from each business's own prices, catalog and files. Drey, the founder and developer, builds and runs it.
Drafting note for counsel
Insert the legal entity, registered address and any required representative. State where Mastak is the controller (account holders' data) and where it processes data for the business (the buyer messages a business receives).
Information we collect
Only what the service needs to run:
- Account details you give us, such as your email address and name.
- Your Instagram connection: the account ID, username and the access token Instagram issues when you log in with Instagram.
- Comments and messages that buyers send to your connected account, and the replies Mastak sends back.
- Business content you add: prices, hours, address, catalog, files and knowledge base entries.
- Your answer to the cookie banner, kept in your own browser.
Drafting note for counsel
Complete the list with technical data (IP addresses, device and log data) and whatever billing data Whop shares with us. Add the legal basis for each category where GDPR or US state privacy laws apply.
How we use it
To run the service you signed up for: read the comments and messages your account receives, write replies from your own content, show every chat in your dashboard, book times in your calendar and send leads to the webhook or sheet you set up. Your email gets service messages about your account.
Drafting note for counsel
Confirm the purposes with the owner. Mention analytics or product improvement only if engineering confirms they exist. Engineering must confirm in writing whether conversation data is ever used to train AI models before this section says anything about training.
Meta and Instagram data
Data that reaches Mastak through Instagram is used only to reply to the buyers who write to your business and to show you those conversations. We don't sell it.
Drafting note for counsel
Write this section to match Meta's Platform Terms and Developer Policies, including the limits on using and transferring Platform Data. Keep both commitments above in the final wording.
Sharing
Data goes only to the services Mastak needs to work: the AI model providers that write replies, our hosting in the United States, Whop for payments and Meta to deliver messages on Instagram. We don't sell personal data.
Drafting note for counsel
Prepare the service provider list with the owner before publishing; don't name providers on this page until it's confirmed. Add disclosures for legal requests and for a change of ownership.
Retention
We keep your data while your account is open, so the inbox and the AI seller keep working. Deletion requests go through the data deletion page.
Drafting note for counsel
Set retention periods for each category only after engineering has checked deletion end to end. Until then, no number of days anywhere on the site.
Your rights and choices
Write to [email protected] to get a copy of your data, correct it or have it deleted. You can also remove Mastak's access in your Instagram account settings whenever you like.
Drafting note for counsel
List the rights under the laws that apply (CCPA and CPRA, other US state laws, GDPR if we serve EU users), how we verify a request and how we answer it. Leave response times out until the owner commits to them.
Security
Mastak runs on servers in the United States; server access uses SSH keys, and a firewall is on. More on the security page.
Drafting note for counsel
Describe only the measures in place today. No claims about how data is stored, certifications or audits without written confirmation from engineering.
Children
Mastak is a tool for businesses and isn't meant for children.
Drafting note for counsel
Set the minimum age and add the COPPA wording.
Changes
When this policy changes, the new version goes on this page with a new date at the top.
Drafting note for counsel
Decide how account holders hear about material changes, for example by email or a notice in the dashboard.
Contact
Privacy questions and requests: [email protected].
Drafting note for counsel
Add the postal address for legal notices and, if needed, EU or UK representative details.