Alpha Studio, SABHYA and NAZAR are creator tools operated by The Indian Alpha and share one workspace account. This policy describes how they handle information when you connect an Instagram Professional account and use their features. It is not Instagram’s or Meta’s privacy policy. Questions and deletion requests can be sent to contact@theindianalpha.com.
Information you provide
SABHYA creates an internal account identifier and a secure sign-in session when you connect. Your moderation choices, such as whether to hold comments for review and whether to hide or restore a comment, are stored with your account. The product does not currently ask you to create an email/password account. If you email us, we receive the message and address you use.
Information received from Instagram
With your permission, SABHYA receives your Instagram Professional account identifier and username, an access token and its expiry, and comment events for the connected account. Comment events can include the comment identifier and text and the comment author’s identifier and username. We use the account identifier to match each event to the correct account. Alpha Studio uses Instagram messaging access for its received-conversation inbox and saved-message automations. When the appropriate permission is granted and intake is enabled, we receive new eligible message text, message and sender identifiers, timestamps and supported Story interaction context. We do not import your full Instagram message history or request publishing permission.
How SABHYA uses this information
We use the token to maintain your connection, receive comments and send the hide or unhide actions you choose. SABHYA stores comments so you can review recent activity and moderation history. A classifier analyzes comment text and records its language and moderation evidence. The final workflow separates a recommendation from an Instagram action: an uncertain comment can enter review; choosing Hide or restoring visibility requests the corresponding action on Instagram. If you enable Hide until review, an uncertain comment can be hidden while awaiting your decision. Broader automatic model hiding is currently disabled.
For additional moderation evidence, SABHYA may send up to 1,500 characters of a single comment to Google’s Generative Language API. That request does not intentionally include your Instagram account ID, the comment ID, the author’s username or the access token. The returned category, confidence and brief rationale may be stored with the moderation record. This evidence does not by itself authorize a platform action.
We do not use Instagram information for advertising, sell it, or publish a shared dataset of customers’ comments. SABHYA does not delete Instagram comments. Alpha Studio can send the saved resource text in a keyword campaign you explicitly activate, subject to Instagram’s reply rules. Reply drafts are not sent automatically.
Alpha Studio messages and reply drafts
Alpha Studio stores the resources, reply text, links, campaign settings, voice preferences and language choices you provide. New received conversations are searchable and can be tagged or marked handled. The inbox and its question classifications do not delete, hide or move messages in Instagram’s native inbox.
When you request a reply draft, the source text, your supplied response facts, language and voice preferences are sent to Google’s Generative Language API using our paid service configuration. Common handles, email addresses and phone numbers are redacted from the source message before submission. Avoid entering passwords or sensitive personal details into response facts or voice preferences. Processing is for your requested service, not for pooling customer conversations into our own general-purpose training dataset.
Received Alpha Studio conversation text and associated delivery history expire after up to 90 days. Reply drafts and their source text expire after up to 30 days. Resource and campaign settings remain until you change them or delete the account. Account deletion also removes the Alpha Studio workspace, conversations, campaigns, resources and drafts. Disconnecting stops new intake and prevents queued messages from being sent; retained records remain subject to these limits and account deletion.
Automatic creator profile setup
Before connection, creators choose whether to build an automatic profile. Normal Instagram login requests profile/media, comment management and messaging access; Instagram shows the requested permissions and the creator decides whether to grant them. With profile setup selected, connection queues a background job that samples up to 12 recent owned posts, available bio, up to 60 replies verified as written by the connected account owner, and up to four owned post images or video/carousel thumbnails. It does not obtain every comment the creator wrote elsewhere. Captions, bio and owner replies are redacted for common contact details and sent with resized temporary images to the paid Google Generative Language API to suggest content topics, formats, writing tone, language and visual style. Image processing describes content and style; it does not identify people or build face recognition references.
This builder does not save raw image samples or source captions/replies. It stores editable suggestions, consent time, processing status and source counts for up to 30 days. Suggestions show limited evidence and must be confirmed before their voice is applied to reply drafts. Confirmed voice preferences remain until changed or account deletion. Refresh is limited to once a day, with a five-minute retry wait after failure. Disconnect stops further account access; account deletion removes the profile and its pending job. Scheduled database backups rotate after 30 days; separate deployment rollback snapshots and restoration controls are explained under Retention and deletion.
NAZAR identity setup
NAZAR identity setup is a separate, explicit request. Selecting photo import authorizes temporary retrieval of accessible photos from your connected Instagram account for local face detection on our Google Cloud server. You choose your own face references from different posts before confirming. Optional voice setup similarly retrieves owned videos temporarily, extracts speech clips locally and asks you to listen and confirm your own voice. Face and voice representations are biometric data. They are encrypted before storage and tied to your account, source-post references and the model version. Raw photos, videos and extracted audio are temporary processing files and are cleaned up after each operation; previews are retrieved on demand.
Unconfirmed face and voice candidates expire after seven days and are removed by scheduled cleanup. Confirmed references remain until you delete your NAZAR identity or your workspace account. Pausing keeps confirmed references. Disconnecting stops new Instagram access. Account deletion removes identity records; scheduled database backups rotate after 30 days; separate deployment rollback snapshots and restoration controls are explained under Retention and deletion. Current enrollment processes identity references locally and does not send them to Hive or Google AI. Automated misuse monitoring is not active in this release; confirming references does not mean monitoring has started.
Service providers and security
The SABHYA application, classifier, PostgreSQL database, job queue and routine backups run on a Google Cloud virtual machine. Cloudflare proxies traffic to the public app and API, including Instagram webhook requests, and can process request metadata and the data sent through those requests. The optional Google model request described above is another external processing path for comment text. Meta provides the Instagram connection and receives moderation requests. Support email is handled separately when you contact us.
The website and app use HTTPS. Instagram tokens are encrypted before being stored in the database and are used server-side. Access to the application and database is restricted to operating the service. No internet service can promise perfect security; please do not send passwords or access tokens to support.
Retention and deletion
Comment text, identifiers, author details and related classification and moderation records are removed from the live system after 90 days by a daily cleanup process. OAuth login state expires after five minutes; app sessions expire after 14 days. We keep the connected Instagram account record while your SABHYA account exists, including after you disconnect, so you can understand your account state. Disconnecting removes the stored Instagram token and stops new comment intake; it does not delete your existing moderation history.
Deleting your workspace account removes its connection, stored token, comments, classification and moderation records, and account-linked queue copies from the live database. It does not delete your Instagram account or comments on Instagram. A one-way deletion record, which does not contain comment text or an Instagram token, is retained for up to 365 days to help prevent accidental restoration. Scheduled database backups can still contain data deleted from the live database until those backups rotate after 30 days. Ad-hoc deployment rollback snapshots are stored separately with restricted operational access and do not share that scheduled rotation. Before a backup or rollback snapshot is restored to service, account deletion records are reconciled so deleted workspace data is not made available again. For instructions and help, see workspace data deletion instructions.
Your controls
In workspace Settings, you can disconnect Instagram or delete your shared workspace account. You can also remove SABHYA’s access from your Instagram account settings. Removing access in Instagram stops future access, but use SABHYA’s deletion control or contact us to request removal of data already held by SABHYA. If you cannot sign in, email contact@theindianalpha.com with the subject SABHYA data deletion; we will verify account control before acting.
Per-post comment insights
When you request a post summary, SABHYA processes all received, retained comment text for that protected post through the paid Google Gemini service in batches. Account IDs, comment IDs and access tokens are not sent; email addresses, handles and phone-number patterns are redacted before processing. The resulting themes and AI-estimated supportive, critical and neutral counts do not trigger hide actions. Derived summaries expire after 30 days and are removed when you delete your workspace. New comments require a refreshed summary.
Free trials are no longer offered. Historical trial records and a one-way account fingerprint may remain for access and audit integrity; reconnecting does not create an entitlement. Payment records remain as anonymized financial audit records after account deletion.
UPI payment data
New checkout uses UroPay’s Merchant API. UroPay receives the order amount, currency, merchant order reference, return and webhook URLs, a small invoice identifier in metadata and an optional billing email already saved to your account. The app does not ask you to re-enter your name, email or UPI transaction reference. Instagram login does not provide a billing email, and an email is not required to create a Merchant order. Your UPI PIN and bank OTP stay with the payment app; our app does not collect them. We retain order identifiers, amount, coupon, verification status and access dates for payment administration and applicable accounting obligations. Earlier payments can retain their original transaction references for reconciliation; they remain read-only in your workspace. Account deletion removes the account link and saved contact fields from our payment records while preserving necessary financial audit information. For payment or privacy help, contact contact@theindianalpha.com.
Background drafts and audience analysis
Alpha Studio stores your draft source, supplied context, task, voice snapshot and generated draft for up to 30 days so a background job can complete after you leave the page. AI drafts are never automatically sent. Recent owned-post IDs, links and bounded caption context are cached for up to one day to verify post selection and show context; analysis request timestamps expire after one day. Audience summaries reflect available comments, not viewer demographics. Disconnect cancels pending sends and pending drafts; account deletion removes these records through the existing deletion flow.
Optional Audience Opinions and smart question sorting
When you explicitly request Audience Opinions, Alpha Studio collects available comments and replies on your selected owned post, preserving caption and parent-comment context. You confirm the idea to analyze. Redacted text and context are sent through OpenRouter to TypeSafe’s JEV model to estimate agreement, disagreement, question purpose, language and missing context. Our requests omit account identifiers, comment identifiers, sender names and access tokens; common email addresses, handles and phone-number patterns in text are redacted. Redaction does not guarantee that all personal information is removed. OpenRouter and TypeSafe are additional processors for this opt-in feature. The request disallows provider fallback and data-collection routing; this setting is not a promise of zero provider retention.
Saved post analyses, their collected text, caption and parent context expire after 30 days. Optional “Follow this post” updates new or changed comments approximately every 15 minutes while connection access, retained analysis and usage limits allow. You can pause following or remove a saved analysis. Removing it does not remove previously collected conversation records from Question Inbox; those follow the inbox retention period and account deletion controls. Imported analysis comments are not used to trigger Auto DM or moderation actions.
Separately enabling smart question sorting authorizes JEV processing of retained and newly received inbox text. You can stop sorting from Question Inbox. Received conversations, and analyzed post comments mirrored into the inbox, retain text and question classifications for up to 90 days. Stopping sorting prevents new requests but does not delete existing classifications. We record request status, model and token usage without raw comment text in a separate usage ledger for up to 90 days. Daily and global processing limits apply; an interrupted or ambiguous paid request is not automatically repeated.
If you request an evidence-based content brief or reply draft, selected comment evidence and conversation context are sent to our paid Google AI writing service, along with your confirmed voice and supplied facts. Source references and the draft remain available for up to 30 days. Classifications and drafts are estimates for creator review. They do not infer audience demographics, sensitive personal traits, representative public opinion or whether every question has already been answered in Instagram. They do not authorize hiding comments or sending generated replies.
Disconnect pauses followed analyses, stops further Instagram access and clears smart-sorting consent. Account deletion removes account-linked projects, inbox classifications, drafts and the usage ledger through the existing deletion flow. Scheduled database backups rotate after 30 days; separate deployment rollback snapshots and restoration controls are explained under Retention and deletion.
Changes and contact
We update this page when data handling changes and show the revision date. For privacy questions, email contact@theindianalpha.com or use our contact page. Read the workspace deletion instructions for account removal and the terms for service and payment conditions.
Last updated 18 October 2026.
