Chhotu privacy policy

Who runs Chhotu

Arcodia Chhotu ("Chhotu") is an app made and run by Arcodia Platforms Private Limited, a company registered in Mumbai, India. 1&O is Arcodia's marketing agency brand; its Instagram account is @oneandocompany. Questions about this page go to [email protected].

What Chhotu does

Chhotu helps the people running an Instagram business account keep up with it. It reads the comments and direct messages that account receives, helps draft replies, and keeps track of which conversations still need an answer. A person checks and approves every reply before it is sent. It works only through Meta's official Instagram API, and only on accounts whose owners have authorised it.

The two kinds of account Chhotu works on

• Arcodia's own account, @oneandocompany. If you message or comment there, Arcodia decides what happens to what you sent, and everything on this page is our own promise to you.
• Accounts of 1&O's clients, the brands whose Instagram we manage, who have authorised Chhotu on their account. If you message or comment there, we handle what you sent on that brand's behalf and follow its instructions. We don't use it for anything of our own, and the limits on this page still apply.

Either way, you can ask us directly to delete your data and we will do it. You don't need to contact the brand first. See how to ask.

What Chhotu receives from Instagram

When you message or comment on an account that uses Chhotu, Instagram passes us:

• Your Instagram username, and the Instagram-scoped ID that Meta gives you for that account (a number that identifies you to that account only).
• The text of your messages and comments, including which post a comment is on and which message or comment you are replying to.
• Basic attachment details: the type of attachment (for example a photo, video or shared post) and the link Instagram provides for it.
• Timestamps, and simple events such as a reaction to a message, a message being seen, or a message being deleted.

Chhotu does not receive your password, your followers, your other conversations, or anything from accounts that don't use it.

What we use it for

Only to read your messages and comments, reply to them, and keep track of which conversations still need an answer. For 1&O's clients, we may also report totals (such as how many messages came in during a month) to the brand whose account it is.

We never sell it. We never use it for advertising, to build profiles of you, or to contact you about anything other than the conversation you started.

Where it goes

• Arcodia's team, who run Chhotu, can see it.
• The brand whose account you wrote to already has your message in its Instagram inbox, and sees the replies we draft for it.
• An AI writing service. To help draft a reply, we send the text of the conversation to an AI service. It is used only to write that draft, the provider does not use it to train its models, and a person approves every reply.
• Our service providers, who store data for us (see below) and are not allowed to use it for anything else.

We don't share it with anyone else, unless the law requires us to.

Where it's stored

Messages Instagram sends to Chhotu are received and stored by a cloud database provider, on servers in the European Union (Ireland). The working copy we read and reply from is kept on Arcodia's own computers in Mumbai, India. Only Arcodia's team can access either.

How long we keep it

90 days. Everything Chhotu receives about you, along with any reply drafts that quote it, is deleted 90 days after it arrives. We keep it for less time if you ask us to delete it sooner.

Deleting your data

You can ask us to delete everything Chhotu holds about you at any time, by email or by sending a direct message to the account you wrote to. We do it within 30 days and confirm when it's done. The full steps are on the Chhotu data deletion page.

Changes

If this policy changes, we will update the date at the top of this page.