Privacy Policy
Last updated: June 27, 2026
Leadway ("Leadway", "we", "us") helps creators and businesses automate Instagram comment replies and direct messages, and track the resulting clicks and leads. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Leadway you agree to this policy.
Information we collect
- Account information — your name, email address, and password hash, or the profile details provided when you sign in with Google or Telegram.
- Instagram data — when you connect an Instagram Professional account via Meta, we store your Instagram account ID, username, follower count, and an access token. The access token is encrypted at rest (AES-256-GCM) and used only to send messages and read comments on your behalf.
- Automation activity — the comments that trigger your automations, the messages we send, and metadata such as timestamps and the commenter's Instagram-scoped ID and username. This is used to run your automations, prevent duplicate messages, and show you analytics.
- Contacts — Instagram users who engage with your automations are saved to your contact list (username, Instagram ID, and any email/phone you collect through forms).
- Click analytics — when someone taps a Leadway link, we record the timestamp, IP address, user agent, referrer, approximate country, and device type to provide attribution reporting.
How we use information
- To operate your automations (send DMs, reply to comments, schedule follow-ups).
- To generate AI-assisted replies from FAQs you configure.
- To provide analytics, lead capture, and CRM features.
- To secure the service, prevent abuse, and enforce plan limits.
- To process subscription payments and the affiliate program.
We do not sell your personal data or your contacts to third parties.
Third-party services
- Meta / Instagram — we use the Instagram Graph API to read comments and send messages. Your use of Instagram is also governed by Meta's terms and policies.
- Anthropic (Claude) — when AI replies are enabled, message text and your FAQs are sent to Anthropic to generate a response. We do not send your access tokens.
- Payment providers — Payme and Click process subscription payments; we receive only payment status, not full card details.
Data retention
We keep your data for as long as your account is active. Instagram access tokens are removed when you disconnect an account. You can delete your data at any time — see our Data Deletion page.
Security
Access tokens are encrypted at rest, passwords are hashed, all traffic is served over HTTPS, and incoming Meta webhooks are verified with HMAC signatures. No method of transmission or storage is 100% secure, but we work to protect your data.
Your rights
You can access, correct, export, or delete your data. To exercise these rights, use the in-app settings or email us at support@leadway.uz.
Changes & contact
We may update this policy; material changes will be posted on this page with a new date. Questions? Contact support@leadway.uz.