Doosi Privacy Policy

Last updated: 2026-11-09 · Türkçe

Doosi is a customer messaging service operated by Dreamspot LLC ("we"). A business connects its Instagram professional account to Doosi so that its team can read and answer direct messages and comments in one inbox, with reply drafts prepared by an AI assistant. This policy explains what we process when a business uses Doosi.

Who is responsible

The business that connects its Instagram account decides why and how its customers' messages are handled and is the data controller for them. We process that data on the business's behalf, under its instructions, as a data processor. For the account connection itself and for the operation and security of the service, we are the controller.

What we process

• Connected account: the Instagram account id, username and account type of the business, the permissions granted, and an access token issued by Instagram. The token is stored encrypted.
• Direct messages: messages people send to the connected account and the replies sent from it, with their time, attachments shared in the conversation, and the sender's Instagram-scoped id, username, name and profile picture.
• Comments: comments on the connected account's posts and the replies to them, with the author's username and Instagram-scoped id and the post they belong to.
• Service records: technical logs without message content (event ids, times, error codes) and counts of AI usage per business.

We do not receive passwords, follower lists, or content from accounts that have not been connected.

How we use it

• To show messages and comments to the business's authorised team members and to send the replies they approve.
• To prepare reply drafts with an AI assistant, using facts the business has provided about its own products and services.
• To post automatic replies to comments when the business has switched that on.
• To keep the service secure, find faults and measure usage for billing.

We do not sell personal data, do not use it for advertising and do not use message content to train AI models. Corrections a business's team makes to drafts are kept as examples to improve replies for that same business only.

AI processing

To prepare a draft, the text of the conversation is sent to an AI model provider through its business API. E-mail addresses and phone numbers in the text are masked before it is sent. The providers we use do not use API data to train their models. A person from the business's team sends direct message replies; where a reply is sent automatically, this is done in line with the platform's rules on automated messages.

Service providers

• Vultr: hosting, on servers located in the European Union (Spain).
• OpenAI and Anthropic: AI model providers for reply drafts.
• Meta Platforms (Instagram): the platform the messages and comments come from and are sent to.

Data received from Meta is used only to provide the service to the business that connected the account, in line with the Meta Platform Terms. Where data leaves the country of the business or of its customers, it is transferred under the safeguards the applicable law requires.

How long we keep it

• Raw platform notifications: 30 days.
• Conversations and comments in the inbox: for as long as the business uses the service, then deleted within 30 days after the business ends the service or asks for deletion.
• Access tokens: deleted when the account is disconnected or the permission is withdrawn on Instagram.

Your choices and rights

If you wrote to a business that uses Doosi, contact that business to access, correct or delete your messages; we help the business answer such requests. A business can disconnect its account at any time in Instagram under Settings, Apps and websites, and can ask us to delete its data as described on the data deletion page. Depending on where you live, you may have rights of access, correction, deletion, restriction, objection and portability, and the right to complain to your data protection authority.

Security

Connections are encrypted in transit, access tokens are encrypted at rest, access to the inbox is limited to the business's authorised team members and to the staff who operate the service, and platform notifications are accepted only with a valid signature.

Changes and contact

We will update this page when the service changes and show the date above. Questions and requests: doosi@dreamspot.io or Dreamspot LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA.